---
title: Configuring SAML SSO with ECC via any IDP
slug: contact-center/configuring-saml-sso-with-ecc-via-any-idp
docTags: 
createdAt: 2025-10-14T09:20:34.691Z
---

This guide outlines the steps to enable Secure Single Sign-On (SSO) using SAML with Ameyo Customer Engagement Platform for both internal employee access and external customer integrations.

## Prerequisites

- Administrative access to Ameyo server environment
- Access to your Identity Provider (IdP), such as Google Workspace or Salesforce
- Necessary certificates and metadata from the IdP

## Steps to Configure SAML SSO

## 1. Backend Configuration

- Access the server hosting Ameyo.
- Update the configuration files or database entries to enable SAML authentication.
  - Modify the relevant configuration tables, typically involving setting parameters for SSO enablement, Entity ID, and SSO URL.
- Import the IdP metadata XML file into Ameyo to establish trust.

## 2. SAML Settings in Ameyo

- Configure the following parameters:
  - IdP SSO URL
  - IdP Entity ID
  - X.509 Certificate details for signing assertions
- Set the Assertion Consumer Service (ACS) URL, which should be provided by Ameyo.

## 3. Configure Identity Provider

- In your IdP (e.g., Google, Salesforce), specify the ACS URL from Ameyo.
- Upload the Service Provider metadata (if applicable).
- Define user attributes and roles to be sent in SAML assertions.

## 4. Application Settings and Domain Configuration

- Define the domain URLs for SSO.
- Set the default user attribute mappings and attribute transformation rules.
- Enable the SAML SSO feature in Ameyo’s admin interface.

## 5. Test and Validate

- Restart the Ameyo server to apply configuration changes.
- Initiate a login flow to verify SSO integration.
- Confirm users can authenticate via the IdP and access Ameyo seamlessly.

## Additional Notes

- Ensure SSL/TLS is enabled for all endpoints involved in SSO.
- Regularly update certificates and metadata to prevent authentication disruptions.
- Consult Ameyo's official documentation for specific configuration commands and database modification queries if custom scripting is needed.

## Supported Identity Providers

The following IdPs have been validated for SAML SSO integration with the contact center platform:

- **Okta** — Validated in version 4.13.3. See also the dedicated guide: [Integrating SAML SSO with Keycloak IdP for Your Application](docId\:v-83PcJH7wKVwsUj-tkYM) for Keycloak-specific steps.
- **Microsoft AD FS**
- **Google Workspace**
- **Keycloak** — Validated in version 4.13.27.
- Any SAML 2.0-compliant IdP following the configuration steps above.

## Troubleshooting Tips

- Check logs for errors related to SAML assertions or metadata mismatch.
- Verify attribute mappings between IdP and Ameyo.
- Confirm that the server clock is synchronized for proper timestamp validation.

## Version History

| Version | Enhancement                                | Release Notes                                        |
| ------- | ------------------------------------------ | ---------------------------------------------------- |
| 4.13.3  | SAML SSO via Okta validated and documented | [4.13.3 Release Notes](docId\:AAQ9HD2jykMjBsrFYAaNe) |