Connect any IdP without custom development
IT admins use the standard SAML 2.0 metadata exchange to connect their corporate identity provider to Xoxoday in minutes - no custom integration work required.
Custom SAML 2.0 / OpenIDConnect any identity provider to
Connect any identity provider to
Xoxoday over SAML 2.0
Use standard SAML 2.0 metadata exchange to connect your corporate IdP - ADFS, custom provider, or university SSO - to Empuls, Plum, and Loyalife.
Book a demo
Get a personalised walkthrough. We respond within one business day.
What you can do
Four things you get once your IdP is connected
Your identity provider handles authentication. Xoxoday relies on it over SAML 2.0 so access to rewards follows the controls your IT team already runs.
Any SAML 2.0 identity provider works with Xoxoday
- Standard SAML 2.0 metadata exchange connects your IdP
- Xoxoday publishes its service provider metadata. Upload it to your identity provider and upload the IdP metadata back - the integration is complete without writing custom code.
- Works with ADFS, custom IdPs, university SSO, and more
- Any SAML 2.0-compliant identity provider can connect to Xoxoday - corporate ADFS, on-premise IdPs, university federation systems, or any standards-compliant provider.
Your existing corporate identity, extended to Xoxoday
- Employees sign in with the same credentials they use everywhere
- Because Xoxoday relies on your existing IdP for authentication, employees use the same username and password - or MFA flow - they already use for every enterprise app.
- No separate Xoxoday credentials to manage
- There is no Xoxoday password to create, reset, or expire. Identity and access control stay with the team and tools that already own them.
Custom attribute mapping for roles and departments
- Map IdP attributes to Xoxoday roles, cost centres, and org units
- During setup, map the attributes your IdP sends - email, role, department, cost centre - to the corresponding fields in Xoxoday so each user lands in the right profile and org structure.
- Org structure from your IdP, not rebuilt manually
- Because attributes come from your IdP, org unit and department assignments in Xoxoday stay in sync with your directory without manual maintenance.
Standards-compliant SSO - no vendor lock-in
- SAML 2.0 and OpenID Connect standards, not proprietary connectors
- The integration is built on open standards, so switching identity providers does not require re-integrating Xoxoday - you update the metadata and continue.
- Available across Empuls, Plum, and Loyalife
- Custom SAML 2.0 SSO works across all three Xoxoday products from a single IdP configuration, so employees have one sign-in for the entire platform.
Use cases
Who runs it, and what for
Three ways IT and security teams use custom SAML 2.0 SSO with Xoxoday.
Keep authentication policy in your own IdP
Security teams retain full control over authentication policy - MFA requirements, session timeouts, conditional access - because Xoxoday defers entirely to the IdP for sign-in decisions.
One sign-in across all Xoxoday products
Enterprise IT teams configure custom SAML 2.0 SSO once and it applies to Empuls, Plum, and Loyalife, giving employees a single sign-in for the whole Xoxoday platform.
How it works
From IdP metadata to employee sign-in
Step 1
Download Xoxoday SAML metadata
From the Xoxoday admin interface, download the service provider metadata - ACS URL, Entity ID, and Name ID format - and copy the values you need.
Step 2
Upload to your identity provider
Create the Xoxoday application in your IdP using the SAML 2.0 metadata from step 1. Assign users and groups in your IdP as needed.
Step 3
Map user attributes
Configure attribute mapping in the Xoxoday admin panel - email, role, department, cost centre - so each user lands in the correct profile and org structure.
Step 4
Test the SSO flow, then activate
Test the connection from the Xoxoday admin interface before making SSO the default sign-in method. Activate when the test passes.
Setup
SAML 2.0 metadata exchange, step by step
Exchange metadata between your identity provider and Xoxoday, map attributes, test the connection, and activate when ready.
Custom SAML 2.0 integration - metadata exchange with any SAML 2.0-compliant identity provider.
IdP admin access and SAML 2.0 metadata from both Xoxoday and your identity provider.
Your IdP authenticates the user and passes attributes to Xoxoday for profile matching and org assignment.
Available with Empuls, Plum, and Loyalife.
Common Questions
Frequently asked questions
Common questions from IT, security, and enterprise admins evaluating custom SAML 2.0 SSO for Xoxoday.
Still have a question? Talk to usAny SAML 2.0-compliant identity provider works - including Microsoft ADFS, on-premise LDAP-backed IdPs, university federation systems, and any provider that supports SAML 2.0 metadata exchange.
SAML 2.0 SSO handles authentication. For automated user provisioning and de-provisioning, check whether your IdP supports SCIM alongside SAML - this varies by identity provider and Xoxoday product.
Yes. During setup you can map IdP attributes - including custom attributes for roles, departments, and cost centres - to the corresponding fields in your Xoxoday profile and org structure.
Xoxoday can be configured with a fallback login method so administrators can access the platform even if the SSO connection is temporarily unavailable. The exact fallback behavior is configured during setup.
Custom SAML 2.0 SSO is available for Empuls, Plum, and Loyalife. A single IdP configuration can cover all three products.
See it in your own identity provider setup
A 30-minute call. We'll walk through the SAML 2.0 metadata exchange and how rollout to your teams would work.
Book a demo