SSO login on custom domain FAQ

29 Oct 2026
Knowledge

Description

This article addresses the most frequently asked questions (FAQ) and know errors about SSO login on custom domain.

Preparation

Can I try out or test SSO login?

No, it is not possible to test SSO login. SSO login and its dependency, a custom domain, require manual set up from both IXON and the user, which is not a service that we provide for testing purposes.

If you have any questions, please see this FAQ or the main article linked at the top. If your question still isn't answered, please contact your IXON account manager or IXON distributor.

Which Identity Providers are supported?

SSO login and automatic user provisioning can be used in conjunction. Below is an overview of the supported systems.

System	SSO login	Automatic user provisioning
Microsoft Entra ID	✓	✓
Microsoft Entra External ID	✓	✗
Google Cloud	✓	✗ ⁽¹⁾
Okta	✓	~ ⁽²⁾
Keycloak	✓	✗ ⁽³⁾
Salesforce	✓	✗ ⁽⁴⁾
Other IdPs that support the OpenID Connect standard	~ ⁽⁵⁾	Not applicable
Other IAM systems that support the SCIM 2.0 standard and function as SCIM Client	Not applicable	~ ⁽⁶⁾

(1) Google Cloud technically supports SCIM, but it requires SAML, which is not supported by IXON.
(2) Okta supports SCIM, but it has not been tested to work with IXON. If you're interested, contact your IXON account manager or IXON distributor to discuss your use case and investigate compatibility.
(3) The core product does not support SCIM, but there may be add-ons or third party integrations that add support.
(4) Salesforce supports SCIM, but can only function as SCIM Server, not a SCIM Client, which is required.
(5) We support the OpenID Connect standard (OIDC). Your Identity Provider needs to support this as well. If you're interested, contact your IXON account manager or IXON distributor to discuss your use case and investigate compatibility.
(6) We support the SCIM 2.0 standard, where the IXON Cloud functions as the SCIM Server. Your Identity Access Management system needs to function as the SCIM Client. If you're interested, contact your IXON account manager or IXON distributor to discuss your use case and investigate compatibility.

Are multiple Identity Providers supported?

Yes, multiple Identity Providers are supported. These may be different Identity Providers, the same, or a mix of both. Each will get its own login button (e.g. "Log in with Google", "Log in with MyCompany", etc).

Maintenance

My client secret has expired or is about to expire. What do I need to do?

Some Identity Providers, like Microsoft Entra ID, require you to configure an expiration date for your client secret. That means that if that date passes, your client secret will no longer be valid and the relevant SSO login button on your custom domain will no longer function.

To prevent this from happening, make sure to set a reminder for yourself or team to generate a new client secret and e-mail it to us before the current one expires.

If it has already expired, generate a new client secret and e-mail it to us.

For specific instructions, see the relevant support article for your Identity Provider, available form the main article SSO login on custom domain.

General

I logged in, but I don't see all the IXON Cloud companies that I know I have access to. Why is that?

When you login with SSO on a custom domain (URL), you can only access that one particular company. Trusting an SSO provider is a matter of privacy and security, and the decision made by one company does not automatically imply trust by other companies. If your user account has access to other IXON Cloud companies, please logout and log back in with your e-mail address and password (not using SSO) to access the other IXON Cloud companies. If you manage the other companies as well and wish to access those when logged in via SSO, please contact our support team to assist you setting it up.

Title

SSO login on custom domain FAQ

URL Name

SSO-login-on-custom-domain-FAQ

SSO login on custom domain FAQ

Introduction

Remote Access

Fleet Management

User Management

Customer Portal

Machine Data

Notifications

Hardware

Open Innovation

Security and Availablility

Release Notes

Knowledge

SSO login on custom domain FAQ

Article Details

Properties

Introduction

Getting Started

Remote Access

VPN connection

VPN Client

Web Access

Connect to your machine

Connection details

M2M Cloud Cluster

Fleet Management

Edge gateway registration

IXagent registration

WAN Settings

LAN Settings

Edge gateway firewall

General device settings

User Management

Setup

Invite and manage users

My account

External Identity And Access Management

Customer Portal

Custom login page and homepages

White labeling

Machine Data

Live Data

Historical Data

Data Source protocols

Pages, cards, and reports

Components

AI assistant

Notifications

Alarms & Notifications

Hardware

Edge gateways and accessories

Open Innovation

Custom development

Marketplace

Security and Availablility

Security

Availability

Release Notes

IXON Cloud

Knowledge

Highlighted Articles

Tips

Related Articles