Put simply, Single Sign-On (SSO) allows you to log in to multiple online platforms using a single set of credentials. SSO also makes it easier to manage secure credentials across multiple platforms by limiting the total number of unique logins and passwords you need to remember.

Wistia’s SSO functionality supports all major SAML 2.0 or OIDC identity providers (IdPs), including:

We generally support any SAML 2.0 or OIDC-compliant IdPs. If you are interested in connecting with an IdP not listed here, reach out to your account’s Customer Success Manager (CSM) for more details.

Check out our dedicated SSO setup guides for the major providers:

Contact your Customer Success Manager for setup instructions if using an IdP not listed here.

When SSO is officially enabled for a Wistia account, the following login options are available to all users:

Just a friendly reminder that these options will only be available after Wistia has enabled SSO for the account and notified you.

It’s possible to require SSO logins for all Wistia users. This option will be off by default when we first activate SSO for an account, and can be enabled upon request.

“Forced SSO” is currently an account-wide option, which means all non-Owner users will be required to use SSO to log in. If you have users outside your company or organization that need to access Wistia, consider leaving this option disabled otherwise they will need to be set up with an SSO credential within your IdP.

Existing Wistia users can seamlessly switch to SSO logins once enabled, as long as their email address in Wistia matches their IdP-managed email. If the emails do not match, users can update their email in Wistia from the Account > Settings > Profile page.

Existing users will retain all prior permission levels and access to content when switching to SSO.

Yes! When you first provision a new user with Wistia access in your IdP, their Wistia user will be automatically created upon their first login to the account.

Currently all user permissions and access to content must be managed within the Wistia account. Users can be provisioned in the IdP for Wistia access, and then given specific roles or permissions within the Wistia user page by a Manager or Account Owner.

Due to security concerns we only support SP-initiated sign-in at this time. We plan to add IdP-initiated capability in a future update.

Security Assertion Markup Language, An XML-based protocol that allows a “Service Provider” (SP) to securely authenticate a user with an IdP by trading specially formatted XML documents. This is the most common and trusted SSO protocol, but there are others.

OIDC is an OAuth-based authentication protocol commonly used for social sign on. Some enterprise IdPs also allow for OIDC-based SSO, such as Okta.

Contact your Customer Success Manager or reach out to Wistia support at any time!