Are you looking for test card numbers?

Would you like to contact support?

User-management icon

Set up single sign-on

Learn how to set up single sign-on (SSO) to log in to the Customer Area.

Single sign-on (SSO) lets you use the same set of credentials to securely access several other services, like email service or your Customer Area.
The Customer Area supports SSO based on the Security Assertion Markup Language (SAML) 2.0 protocol. SSO solutions that use the SAML 2.0 protocol include identity providers like Okta, Azure, and Microsoft AD FS.

Before you start

To set up SSO for the Customer Area you need:

  • An SSO solution that supports the SAML 2.0 protocol.
  • A Customer Area company account. You can't set up SSO with a merchant account.
  • Accept the legal notice about SSO. This must be done by someone authorized to represent your organization.


  • Keep at least one admin user that doesn't log in using SSO, so that you can troubleshoot issues.

Add the Customer Area to your identity provider

You need to do this procedure first in your test Customer Area, and then repeat it in your live Customer Area.

To do this, you must get information from your service provider:

Adyen field name Okta
AssertionConsumerService (Metadata)
Single sign-on URL
Entity ID Audience URI
Name ID Name ID format (Must be an email address)
Response Response

Step 1: Get the Customer Area metadata URL

  1. Log in to your Customer Area.
  2. Go to Settings > Single sign-on and select Start configuration.
  3. Under Service provider configuration, find either the SSO URL or AssertionConsumerService. Select Copy URL.
    You need this URL to configure your identity provider.

Step 2: Configure your identity provider

  1. Configure your identity provider:
    • Add the URL you copied from the Service provider configuration in the Customer Area.
    • Enable SAML2 request signing.
    • Enable SAML2 response signing.
    • SubjectNameID must be an email address. For example,
    • If Azure is your identity provider, you must enable the response and assertion (Sign SAML response and assertion) signing option in the Azure user interface.
  2. Get your identity provider's metadata URL.
    You need this when you configure the service provider in the Customer Area.

Step 3: Configure the service provider in the Customer Area

  1. Log in to your Customer Area.
  2. Go to Settings > Single sign-on.
  3. Paste your identity provider's metadata URL in the input field.
  4. Select Fetch configuration.
  5. Check the fetched details, then select Save configuration to finish the process.

After doing this, you can start testing SSO. Your existing users don't automatically have SSO enabled, so you must:

If you experience issues with your SSO configuration for Customer Area, contact our Support Team.

Create users who log in to the Customer Area using SSO

The person who you create the user for must already have an account with the identity provider your organization uses. You can create the user either in your Customer Area or by making a Management API request.

In your Customer Area

You must have one of the following roles:

  • Merchant admin
  • Merchant user management

To create new users to login through your identity provider:

  1. Log in to your Customer Area.
  2. Go to Settings > Users.
  3. On the right top of the page, select Create new user.
  4. For User details:
    • Select the SSO option as the login method.
    • Enter a unique email, a first name, and a last name for the new user. The email address will be the user's username.
  5. Select Continue.
  6. For Accounts, you can choose whether this user will have access to all associated merchants accounts or specific groups and accounts.
  7. Select Continue.
  8. For Roles, you can only assign roles that your own user already has. For a list of all possible roles, see user roles.
  9. Select Continue.
  10. In the Summary page you can check and edit the details, accounts, and roles you assigned to the new user.
  11. Select Create new user.

The new user receives an email with a link to verify their email address for their Customer Area account.

If you have questions or feedback, get in touch with your Adyen contact.