Aircall and SAML authentication

Security Assertion Markup Language (SAML) provides users with secure access to Aircall applications through an existing identity provider (IDP) such as Okta, Auth0, JumpCloud, Ping One, Azure AD, and more. This process allows your team to use a single set of credentials across systems, improving both security and ease of access.

Important: This functionality is currently available only to a limited number of customers. To request activation of SAML Single Sign-On (SSO) for your company, please contact our Customer Support team.

Requesting activation

Once SAML is activated, users will see the Sign in with SSO option on the Aircall login screen. This is where they can connect via your identity provider.

Although all users will see this option, only an Admin can request the activation of SAML SSO by reaching out to their Aircall Account Manager.

Note: IDP-initiated SAML sign-in is not currently supported. After SAML is configured, users must log in through the Aircall Dashboard or app login page using the Sign in with SSO option.

Configuring the identity provider

After Aircall has enabled SAML for your company, your IT administrator will need to configure your chosen identity provider. Please follow the relevant setup guide:

• Configuring Okta for SAML Authentication

• Configuring Auth0 for SAML Authentication

• Configuring JumpCloud for SAML Authentication

• Configuring Ping One for SAML Authentication

• Configuring Azure AD for SAML Authentication

• Configuring OneLogin for SAML Authentication

• Configuring Google Workspace for SAML Authentication

Important: Only attempt to configure your identity provider after Aircall has confirmed that SAML has been enabled for your account.

Once the identity provider is configured, export its metadata as an XML file or obtain the metadata URL. This information will be required in the next step.

Setting up SSO in the Aircall Dashboard

After obtaining the metadata file or URL, follow these steps to complete the setup in Aircall:

Steps:

1. Go to dashboard.aircall.io/account/security, or open the My Company section in the Admin Dashboard and select the Security tab.
2. Under Authentication method, select SAML.
3. Enter your identity provider metadata information (either by uploading the XML file or pasting the metadata URL).

Note: If you have configured any privileged users, these accounts will be able to log in using either their email and password or SAML/SSO.

How to add a privileged user

Privileged users have the option to log in with either their standard credentials or SSO. To add a privileged user login in to the Aircall Dashboard.

Steps:

1.  My Company --> select the Security tab.
2. Under Authentication method, click Manage privileged users.
3. Add the desired users to the privileged list.

Tip: Adding at least one privileged user is recommended to ensure continued access in case of SSO configuration issues.

FAQs

Can I manage session expiration or automatically terminate sessions using SAML?
Currently, Aircall does not support the SessionNotOnOrAfter attribute, so automatic session termination via SAML is not available.

Can I enable Device Posture Check (DPC) in SAML?
No. Aircall does not currently support device posture checks as part of SAML SSO.