Skip to main content
Use a custom SAML SaaS when the SaaS supports SAML single sign-on (SSO) but isn’t in the SaaS catalog. You exchange SAML details between the cockpit and the SaaS admin console, and employees then sign in to the SaaS through Primo.
1

Go to SaaS > Directory and click Add a SaaS

2

Select Custom SAML

In Connect a new SaaS, enter the SaaS name and logo, then confirm. The SaaS opens on its Settings tab, and the Enable Single Sign-On (SSO) modal opens.
3

Choose the login method

Select Login with Primo, Login with Google, or Login with Entra.
4

Copy the identity provider details to the SaaS

In the SaaS SAML settings, paste the details it asks for:
5

Enter the service provider details

Copy these from the SaaS SAML settings into the modal:
  • Service provider entity ID
  • Assertion consumer service URL (ACS URL)
6

Click Connect

Test the sign-in with one employee before you enforce SSO in the SaaS.