Adobe Commerce Single Sign-On (SSO)

Adobe Commerce SSO reduces password management challenges for customers and administrators while improving security. Organizations can apply existing Identity Provider security policies such as MFA, conditional access, and enterprise authentication controls.

The extension works with popular Identity Providers including Azure AD (Microsoft Entra ID), Okta, Google Workspace, Keycloak, Auth0, Salesforce, Ping Identity, OneLogin, ADFS, AWS Cognito, JumpCloud, and custom SAML/OAuth/OIDC providers.

Yes. Adobe Commerce SSO supports Microsoft Azure AD (Entra ID), allowing users to authenticate using their existing Microsoft work accounts. Azure AD groups can also be used for role and customer group mapping.

Yes. The extension supports Single Sign-On for both Adobe Commerce Admin users and storefront customers. Separate login buttons can be added to the admin and customer login pages.

Yes. New users can be automatically created in Adobe Commerce during their first SSO login using information received from the Identity Provider.

Yes. You can configure role mapping for administrators and group mapping for customers based on information received from your Identity Provider.

Yes. The extension uses industry-standard authentication protocols and allows organizations to continue using their existing security controls, including MFA and Identity Provider-based access policies.

Yes. Multiple Identity Providers can be configured simultaneously. This is useful for B2B businesses where different customers, partners, or employees use different authentication systems.

Yes. The extension supports Adobe Commerce Cloud and enterprise deployments, allowing organizations to implement secure Single Sign-On across their stores.

Setup time depends on the Identity Provider and configuration requirements. Common providers such as Azure AD, Okta, Google Workspace, and Keycloak can usually be configured within a short time using guided setup documentation.