Secure authentication with SAML SSO
Easily set up single sign-on (SSO) via a third party identity provider.
)
Loved by 5,000+ Finance and Procurement Teams
Control and enable Spendesk access
for employees
Connect Spendesk with your SSO identity provider
Spendesk is compatible with several well known identity providers, such as Okta, Onelogin & Microsoft Azure.
Secure employee access with a single sign-on portal
Control the authorization and authentication of employees access to Spendesk.
Enable simple and fast authentication for employees
Using one SSO credential, employees can easily access every app they need.
Trusted by finance teams who move fast and don’t break things
100% adoption, in under 30 days
Read the full story"I can’t imagine how our business would operate without Spendesk. We couldn’t ask for a better spend management system."
)
){kind=logo}
12x transaction volume
Read the full story“ Spendesk gives us the agility we need to manage spend and accounting at scale. Today I couldn't imagine working without it.”
Seamless integrations
Read the full story“ The friction-free NetSuite integration was one of the deciding factors for us.”
)
)
+3 days per month gained
Read the full story“ How Evaneos gains 3 days per month with automated reconciliation.”
)
Why switch to Spendesk?
Get the spend control and visibility finance teams need.
FAQ
Spendesk supports SAML SSO to provide secure single sign-on using third-party identity providers such as Okta, OneLogin, and Microsoft Azure. Spendesk's SAML integration centralizes authentication, lets administrators control authorization and access, reduces password resets, and preserves Spendesk features like company cards, invoice management, and real-time spend visibility.
To set up SAML SSO for Spendesk with Okta or Azure AD, export Spendesk's SAML metadata or ACS URL, configure the identity provider with that metadata, map required user attributes, upload the IdP certificate in the Spendesk admin console, enable SAML in Spendesk, and run test logins to verify single sign-on and attribute mapping.
Spendesk delegates authentication to the configured identity provider, so multi-factor authentication is enforced by the IdP. Enabling SAML SSO lets organizations apply MFA policies in Okta, OneLogin, or Azure while maintaining Spendesk access control and centralized administration of user sign-on behavior.
Enabling SAML SSO centralizes authentication but preserves Spendesk's internal permission and approval model. Administrators continue to manage Spendesk-specific settings such as card access, spend limits, and approval chains inside Spendesk while authentication and single sign-on are handled by the configured identity provider.
)