Skip to main content
Empuls integrates with enterprise Active Directory/LDAP using SAML 2.0–based SSO (e.g., ADFS, Azure AD). Xoxoday configures Empuls as a SAML Service Provider, exchanges SP/IdP metadata, and maps AD attributes (email/employee ID, groups) into Empuls user records and roles via SAML claims.
Empuls integrates with enterprise Active Directory/LDAP using SAML 2.0–based SSO (e.g., ADFS, Azure AD). Xoxoday configures Empuls as a SAML Service Provider, exchanges SP/IdP metadata, and maps AD attributes (email/employee ID, groups) into Empuls user records and roles via SAML claims. Authentication and strong-password/MFA enforcement are then handled centrally in AD/IdP, while Empuls consumes only signed assertions for authorization and access control. For any local (non-SSO) login usage, Empuls follows Xoxoday’s internal password policy: strong passwords with minimum 8 characters, upper/lower case, digits and special characters, password expiry (45–90 days depending on role), reuse restrictions on last 5 passwords, and account lockout after 5 failed attempts, aligned with ISO 27001 and SOC 2 controls. Learn more: Empuls Help Centre

Does Empuls support Single Sign-On (SSO) for employee login?

Empuls supports SSO via SAML and OAuth standards, letting employees log in with corporate credentials for secure, seamless access.

Does Empuls support Single Sign-On and MFA for secure login?

Empuls supports SAML 2.0 and OAuth 2.0 SSO, connecting to your existing identity provider and honouring every MFA policy your IT team has configured.