SSO: Setting Up Single Sign-On (SSO) Login for Your Site Members

Important:

Currently, SSO login is only available with Wix Studio enterprise solution and Wix Channels.

Single Sign-On (SSO) is an additional authentication method that lets site members sign in to your Wix site using their organization profile login credentials. If you wish to create specific pages on your site which can only be accessed by site members using SSO, you'll first need to create members only pages.

Once you have members only pages, go to Site Member Settings on your site's settings page and follow the steps below to enable SSO login for your Wix site.

Step 1 | Add your Identity Provider (IdP) information

Important:

• Wix currently supports only the Open ID Connect protocol.

• Make sure to set the SSO configuration in your IdP settings to allow the admin to ask for consent on behalf of all users.

To set up SSO login for your site members, Wix needs some information from the settings of your Identity Provider (IdP). The information that you need to find is the Client ID, Client Secret, and the Config URL.

You can use any IdP that supports the Open ID Connect protocol. Some IdPs use different terminology for the settings information that Wix needs. Check below for some helpful info about the most common IdPs and the terminology that they use.

Azure

You can find the information you need on the App Registration page that you created for Wix on your Azure Portal. Learn more about registering an app.

You need to have one of the following roles in Azure to view this information: Global Administrator, Cloud Application Administrator, Application Administrator, or owner of the service principal.

Okta

You can find the information you need on the OIDC app page in your Okta account. Learn more about managing your OIDC app.

Add the settings information from your Identity Provider in your Wix account's SSO Settings. This will let your Identity Provider communicate with Wix using the OpenID Connect protocol.

To add your IdP information:

1. Go to Site Member Settings in your site's dashboard.

2. Click SSO Settings.

3. Enter the Client ID from your IdP in the Client ID field.

4. Enter the Client Secret from your IdP in the Client Secret field.

5. Select the Config URL option that you want to use:

7. (Optional) Copy the Logout URL value from the Logout URL field. This is a read-only URL that Wix generates based on the values you provided in the previous steps and the Open ID Connect protocol.

8. Click Save Changes.

Tip:

Your account owner and any account admins (co-owners) can access your SSO Settings. You can also create a new role with the Manage SSO permission to grant access to other users in your organization.

Step 2 | Copy the callback URL

When a user successfully authenticates themselves using an SSO service, the SSO service redirects to a predefined URL. This URL is known as a callback URL (sometimes called a redirect URL, or a reply URL).

Wix automatically generates a callback URL based on the information that you added in the Information your IdP needs section of your SSO Settings. This is shown as the Web Logins URL.

The callback URL is based on the Open ID Connect protocol. If you need to provide a callback URL to your IdP, click the Copy icon

next to the URL to copy it.

Tip:

To add your callback URL, go to:

Okta: General settings > Login > Sign-in redirect URLs

Azure: Authentication > Web > Redirect URLs

Step 3 | Enable SSO login and set as required if needed

After you've added your IdP's information, you can enable SSO login to let your users sign in using SSO. You can also choose to require your users to sign in using SSO and disable all other methods for signing in.

To enable SSO login and set as required:

1. Go to Site Member Settings in your site's dashboard.

2. Click SSO Settings.

3. Click the Enable SSO toggle to enable or disable SSO login:

   • Enabled: Your users can sign in to their Wix account using SSO or other methods such as an email address and password.

   • Disabled: Your users cannot sign in using SSO. They can still sign in using other methods.

1. Click the Set SSO as required toggle to choose whether or not you want to require your users to sign in by SSO.

   • Enabled: Users can only sign in with SSO. They cannot sign in using other methods such as an email and password. Account owners can still sign in using other methods.

   • Disabled: Users can sign in using SSO or other methods.

Important:

We recommend that you manually test your SSO settings before setting SSO as required.

1. Click Save Changes.

Step 4 | (Optional) Customize the Advanced settings

You can use the Advanced settings to override certain fields in your IdP's settings. This is useful when the default fields in your IdP are not defined by the Open ID Connect protocol.

To set claims override mapping:

1. Enter the email address you want to use in the Email field.

2. Enter a name the First Name field.

3. Enter a name in the Last Name field.

4. Enter a URL for the image you want to use for profiles in the Profile image field.

5. Click Save Changes.

Step 5 | (Optional) Copy your SSO login page info

Wix generates a login page URL after you add your IdP details to the Information from your IdP section and save them. Your users can log in with SSO using this login page URL. You can also use it to test settings.

Select the login page URL and copy it to share it with your users.

Step 6 | (Optional) Customize your SSO login form

Customize how the SSO sign-in option looks on your login form. Choose whether it appears as a button or a link, and set its icon, text, colors, and hover state.

To customize the SSO login form:

1. Go to your editor.

2. Click the Pages icon

   

   on the left side of the editor.

3. Under Member Authentication, select Login form.

4. Click the form element on the page.

5. Click Settings.

6. Click the Design tab.

7. Click Social login options

8. Under Additional design settings, click SSO.

9. Under Button type, select Button or Link.

10. Choose what you want to do next:

FAQs

Click a question below to learn more about customizing SSO on your login form.