Introducing Single Sign-On (SSO) for Your Client Portal

Foyer now supports your staff users to login via single sign-on (SSO). If your team uses an Identity Provider like Microsoft Entra ID, Okta, Google Workspace, or similar your staff can now sign in to Foyer with a single click through your existing IdP - no separate password needed.

What's Included with Foyer's Single Sign-On

• SP-Initiated SAML 2.0: Staff click "Sign in with SSO" on your Foyer login page and are redirected to your IdP. After authenticating there, they're signed in to Foyer automatically.
• Enforce SSO: Optionally require all staff to use SSO. When enforced, password login is disabled for staff accounts entirely.
• Just-In-Time Provisioning: New staff are automatically created in Foyer on their first SSO login. No need to manually invite each person - just assign them in your IdP and they'll have access.
• Dual Certificate Support: Rotate your IdP signing certificate without downtime. Add your new certificate as a secondary cert, update your IdP, then remove the old one.
• Audit Logging: Every SSO login, account link, and configuration change is recorded in your audit log.

How to Set Up Single Sign-On in Foyer

1. Go to Org Settings -> Single Sign-On (SSO)
2. Copy your Entity ID and Reply URL (ACS) into your IdP's SAML app configuration
3. Paste your IdP's Entity ID, Login URL, and X.509 Certificate back into Foyer
4. Click Enable SSO

The whole setup takes about 5 minutes. We have a full guide with step-by-step instructions for Entra ID, Okta, and Google Workspace.

SSO is available on the Ultimate plan and above. You'll need admin access to both Foyer and your Identity Provider to configure it.

If you have any questions about getting SSO set up for your organization, reach out to our support team and we'll help you get it running.