Launch GraphOS Studio

Setting up Apollo SSO with a SAML-based IdP

Single sign-on (SSO) is available only for Dedicated and Enterprise plans. This feature is not available as part of an Enterprise trial.

This guide walks through configuring a generic SAML-based identity provider (IdP) for use with Apollo single sign-on (SSO). These steps require administrative access to your IdP.


If you use Okta or Azure Active Directory as your identity provider, instead see the corresponding guide for your tool:

  • Okta
  • Azure AD
  1. Create a new application in your SSO environment. While doing so, set the following values:

    • App Name: Apollo GraphOS
    • App logo: Apollo logo (optional)
  2. If possible, upload the appropriate Apollo SAML metadata for your organization:

  3. Set your Single Sign on URL or ACS URL to the following:

    You can also use this value for the following :

    • Recipient
    • ACS (Consumer) URL Validator
    • ACS (Consumer) URL
  4. Set your Entity ID according to the following:

    • If your organization does not already use PingConnect as an Entity ID, use PingConnect.
    • If your organization does already use PingConnect, use the following value: fd76e619-6c0a-461c-912d-418278929d60
  5. Set your RelayState to the following value:

  6. Set the following user attributes:

    • sub:
      • The sub attribute should uniquely identify any particular user to . In most cases, provides this unique mapping.
    • email:
    • given_name: user.firstName
    • family_name: user.lastName
  7. Assign users to the application.

    • Reach out to your SSO or Identity & Access Management team for help assigning the relevant groups and users to Apollo GraphOS.
  8. Send your Apollo contact your identity provider (IdP) SAML XML metadata file.

    If you can't send this file, send one of the following instead:

    • IdP entity ID
    • IdP single sign-on URL / SSO URL
    • IdP x509 certificate
  9. Your Apollo contact will complete your SSO setup.

Azure AD
Edit on GitHubEditForumsDiscord

© 2024 Apollo Graph Inc.

Privacy Policy