Enhance and Extend Your SSO Solution With Keeper SSO Connect*
Request a Demo
*Included with Keeper Enterprise
Works With All Identity Providers
Keeper SSO Connect® integrates with all popular SSO IdP platforms, including Office365, Entra ID (formerly Azure AD), ADFS, Okta, Ping, JumpCloud, Centrify, OneLogin, F5 BIG-IP APM, Google Workspace, Duo and any other SAML 2.0 identity provider.
Auth0 
Entra ID Azure 
Imprivata 
Okta 
Onelogin
Ping Identity 
PingOne
Rippling
RSA SecurID
SecureAuth
Shibboleth
Hennge 
SAML 2.0 ProvidersKeeper with SSO for seamless access to every work application
Keeper SSO Connect unlocks a simplified login experience for your users and one-click provisioning for administrators.
Enhance your SSO deployment with secure, streamlined access to every work application.
Access Keeper without a master password
With Keeper SSO Connect, users enjoy a simplified login experience that uses their identity provider (IdP) for federated login and to authenticate into their Keeper Vault.
Centralize access management
Keeper SSO Connect is compatible with Conditional Access Policies (CAP) enforced by the IdP and accelerates time to value for admins by mapping over existing groups from your IdP.
Protect applications not covered by SSO
Combining Keeper's robust password and passkey management with your IdP's capabilities enhances security by ensuring that every website, application and service is easy to access and securely managed. Keeper auto-fills passwords and passkeys on any website or application not connected to your SSO for end-to-end encrypted access.
Simplify provisioning
Unlock one-click provisioning and deprovisioning with SCIM to ensure users have the appropriate least privilege access based on their roles and responsibilities. By streamlining onboarding and offboarding with the IdP, administrative overhead is reduced and efficiency is improved.
Keeper can be deployed across any environment
- Provision users for either SSO, passwordless or Master Password authentication
- Automatically provision vaults, teams and roles with SCIM
- Supports all environments
- Enable encrypted offline vault access when SSO is not available
- Provides just-in-time provisioning
- Deploys in just minutes, providing immediate ROI
Transform your sign-on process with the convenience of Keeper
Keeper SSO Connect enables secure authentication with end-to-end encryption across all of your websites, systems and applications.
- Due to complexity, most organizations only set up a few SAML-based applications in their SSO environment, and users still need secure and seamless access to tools not be covered by SSO to perform their tasks
- Keeper closes the functional and security gaps left by storing all other credentials, including internal applications, websites and infrastructure services that don't support SAML
- Your employees manage and share more than just credentials. Organizations of all sizes need to protect digital secrets, sensitive files, credit card and payment info, and more
Keeper provides simple and secure sharing for users, and allows administrators to set granular restrictions on what can be shared and by whom at the role level.
How integrating Keeper addresses gaps left by SSO solutions
If your organization already uses an SSO solution or is thinking of implementing one, pairing it with Keeper will fill the gaps in functionality and security.
Use Case
Keeper
SSO Identity Providers
Password-Based Apps
Shared Passwords & Secrets
Encrypted Data Storage
Social Media Sites
Native Apps
Offline Access
SSH Keys & SSL Certs
API Credentials
Encrypted Private Files
Zero-knowledge encryption
SAML-Based Apps*
*Via Keeper SSO Connect®
Zero-knowledge encryption for SSO Connect
Keeper Security holds US utility patents for integrating SSO with a zero-knowledge platform. In this encryption model, the user has no master password and encryption is performed using Elliptic Curve (EC) cryptography.
Patent 11,363,009: System and method for providing secure cloud based single sign-on connections using a security service provider having zero-knowledge architecture
Patent 10,356,079: System and method for a single sign on connection in a zero-knowledge vault architecture
In this architecture, the Data Key of the user is decrypted with the Device Private Key and the Device-Encrypted Data Key is provided to the user upon successful authentication from their designated identity provider. Learn more about the Keeper SSO Connect encryption model.
Step into a passwordless era with Keeper's secure, easy access solutions
Keeper acts as the bridge between SSO and biometric authentication solutions for a true passwordless experience. Employees can access every application, website and service without ever needing to enter a password.
- Keeper provides a secure digital vault that stores, manages and autofills passwords and passkeys.
- Keeper integrates with Single Sign-On (SSO) providers, enabling users to access their vault records without entering a master password.
With Keeper, any size organization can adopt a fully passwordless authentication process in a matter of hours.
