Scope
Can you sign into the Chargebee dashboard using SSO?
Summary
Login Options
You can log in to Chargebee using the ways listed below:
Sign in via Chargebee
On the login page, click Sign in with Single Single-On.
Enter the Chargebee site's URL in the text box provided and click Sign in.
You will be taken to your IdP's login screen. Enter your credentials and click Sign In.
Other options:
Solution
Security Assertion Markup Language (SAML) is an XML-based framework for enabling authentication through a third-party identity provider or in-house single sign-on application.
This feature is available only on Scale and Enterprise plans. To know more, visit our plans and pricing page.
SAML comes in handy for organizations that use multiple applications or services and need a single source to manage member activity. Instead of creating multiple credentials for different applications, with SAML you can create one set of credentials per member and allow them to access multiple applications.
Configure SAML in Chargebee
Login to Chargebee and navigate to Settings > Security > Single Sign-on > Setup.
Select SAML and click Confirm.
Paste the Login URL and the X.509 Certificate retrieved from the IdP.
Disable SAML
To disable SAML, go to Settings > Security and click Disable.
When you disable SAML in Chargebee, your team members will be notified that SAML has been disabled and they should sign in using custom credentials or Google SSO.
SAML offers the ability to:
Manage a password policy across multiple applications
Access multiple applications securely
Reduce the risk of lost or forgotten passwords
Note
Enabling SAML will mandate all users to sign in only via SAML.
Okta, OneLogin and Azure AD are the supported IdPs. If you are using a different IdP, please raise a request to Chargebee Support.
Only one IdP can be configured per Chargebee site.
Chargebee supports SAML 2.0
Enabling SAML will disable 2 factor authentication (2FA) in Chargebee. This is to remove redundancy as the IdP will have the option to enable 2FA.
The team member's email address must be present in Chargebee and IdP.