Applies to
- Business
- Enterprise
Compare Azure AD work account SSO to SAML SSO with an Azure AD IdP
If you're trying to decide between Microsoft Azure AD SSO or SAML SSO, this table helps you decide which one is the best fit for you.
Who can use this?
Plans:
- Business
- Enterprise
The following chart covers the differences between Microsoft Azure AD SSO or SAML SSO. Use it to decide which one you should configure.
Scenario | Microsoft Azure AD SSO | SAML SSO |
|---|---|---|
Protocol | OAuth2 and OpenID | SAML |
Setup | *None | Self-Service by the organization's IT team. Smartsheet Support can assist as needed. |
Email address use | **Requires users to maintain their Primary Simple Mail Transfer Protocol (SMTP) email address as their primary email address in Smartsheet. | Email being passed from IdP needs to be a validated primary or secondary email address on the Smartsheet account. |
End-user impact | A validation email is sent to the user's mailbox and must be confirmed prior to use. | None |
*Microsoft Azure AD SSO Setup: Depending on your Azure AD environment, it's possible that an Azure Admin needs to either Assign a user or Grant admin consent for Smartsheet to the Enterprise application within Azure AD. Microsoft documents this here. Any issues or questions on this process may be best addressed by Microsoft.
**Microsoft Azure AD SSO email address use: Learn more on Sign-in or Sign out of Smartsheet
Generally, SAML is recommended for its flexibility.