What is Single Sign-On (SSO)?
Single Sign-On (SSO) allows users to access multiple applications or services using just one set of login credentials. This eliminates the need to remember separate usernames and passwords for each platform.
Camphouse supports both Identity Provider (IdP)-initiated login and Service Provider (SP)-initiated login. It's also possible to configure multiple Identity Providers (IdPs) on a single account.
Home organizations and SSO
Every Camphouse user belongs to a home organization. SSO is linked to the home organization, so a user can only sign in with SSO when their home organization has SSO enabled.
If a user does not have a home organization, or their home organization does not have SSO configured, they will not be able to sign in with SSO. In that case they should sign in with their email address and password instead. If a user has no home organization at all, they'll be prompted to select one immediately after signing in, before they can access anything else in Camphouse.
You can view or change your home organization at any time by clicking your avatar in the top right, then going to User settings > Home organization.
Accessing Camphouse via IdP-initiated login
With IdP-initiated login, the login process starts from your company’s Identity Provider (e.g., Google, Okta). Once logged in through the IdP, users are redirected directly into Camphouse — there's no need to visit the Camphouse login page.
Accessing Camphouse via SP-initiated login
With SP-initiated login, users start at the Camphouse login page. From there, they are redirected to their company’s IdP to authenticate. After a successful login, they are redirected back into Camphouse.
Requirements for using SSO
To enable SSO on your account, reach out to your Customer Success Manager.
It's possible to use more than one IdP on the same account.
For each Identity Provider, the following information is needed:
Entity ID / Issuer
Single Sign-On URL
X.509 Certificate
Alternatively, you can send:
The IdP metadata XML file, or
A URL linking to the metadata.
Camphouse will extract the necessary details from there.
How to obtain IdP metadata
You can typically obtain the metadata XML in one of the following ways:
Via your Identity Provider's Admin Console
Most providers (Okta, Azure AD, Google Workspace, Ping Identity, ADFS) offer a download option for SSO metadata.
Look for sections like “SSO Setup,” “Federation,” or “Metadata”.
During SSO configuration
If you're setting up a new SSO connection in the IdP, metadata is usually generated during the process.
You can then download or copy the XML file.
Ask your IT team
Your internal IT department or IdP administrator should be able to help.
Alternatively, contact your IdP’s support team for assistance.
Adding new users to SSO
Before users can sign in via SSO:
They must be invited to Camphouse and activate their account (by accepting the email invite).
Their email address must match in both Camphouse and the Identity Provider.
Deleting users
If a user is removed from your Identity Provider:
They will no longer be able to log in to Camphouse.
However, they will still appear under Users & Roles in your account settings.
To fully remove the user from Camphouse, you’ll need to delete them manually.
If a user is removed from their home organization
If a user is removed from their home organization, they can no longer sign in with SSO. To regain access:
Sign in to Camphouse using your email address and password instead of SSO.
You'll be automatically prompted to select a home organization before you can continue. This screen replaces the rest of the app until you choose one.
Choose an organization that has SSO enabled from the list, then confirm your selection. The list only includes organizations you are already a member of.
Once a home organization with SSO is set, you can go back to signing in with SSO. You can also change your home organization at any time afterwards via your avatar in the top right, then User settings > Home organization.