Single Sign-On (SSO) lets your employees sign in to Vantage Fit using the same corporate credentials they use for Outlook, Slack, or any other work tool — no separate Vantage Fit password to remember, no extra account to manage.
This article covers enabling SSO for your company. Once it's live, employees sign in via the standard Vantage Fit app — see How Do I Sign In Using SSO? for the employee-side flow.
Supported Identity Providers
Vantage Fit supports any SAML 2.0 compliant identity provider, including:
- Microsoft Entra ID (formerly Azure Active Directory)
- Okta
- OneLogin
- Ping Identity
- Most other enterprise SAML 2.0 IdPs
If your IT team has standardised on a different provider, mention it when you reach out — as long as it speaks SAML 2.0, integration is straightforward.
How Setup Works
SSO is configured by the Vantage Fit integration team, not from the admin dashboard. The flow is:
- Contact your Vantage Fit account manager to start an SSO integration. If you don't have an account manager handy, email support@vantagecircle.com and we'll route the request.
- Your IT team prepares the IdP side. They'll need to:
- Create a SAML application for Vantage Fit in your IdP
- Configure the redirect URIs we provide
- Decide on the user identifier — work email address or employee ID (we support either; agree on one before exchanging metadata)
- Export the IdP metadata XML
- Exchange metadata. Your IT team shares the IdP metadata with the Vantage Fit integration team. We configure the Vantage Fit side and share back any additional values your IdP needs.
- Testing. We provision a small set of test users on your side and verify the round-trip works end-to-end.
- Go live. Once testing passes, SSO is enabled for all employees on your account.
Timeline
Setup time depends on your IT team's availability and your IdP. Once we have your IdP metadata, the Vantage Fit team usually takes around 2 weeks to complete configuration, testing, and go-live.
If your IT team is already familiar with SAML and has the IdP ready, the whole process can move faster.
What to Tell Your IT Team
Forward this list to your IT/IdP admin when you start the engagement:
- Protocol: SAML 2.0
- User identifier: decide between work email or employee ID (must match what's in your Vantage Fit roster)
- Vantage Fit will provide: Service Provider (SP) metadata, redirect URIs, assertion consumer service endpoint
- Your IT will provide: IdP metadata XML, SSL certificate, list of test users for the pilot
- Attributes to map: at minimum, the user identifier attribute (email or employee ID). Other employee attributes (name, department, manager) can come from your existing HR roster — they're not required at SSO setup time.
After SSO Is Live
- Employees sign in via the Vantage Fit app using the SSO flow — see How Do I Sign In Using SSO?.
- Password-based sign-in can be disabled or kept enabled in parallel — your call during setup.
- Employees who were already using password sign-in keep their existing accounts; their data carries over once they sign in via SSO with the matching identifier.
- New hires added to your roster work the same as before (CSV/SFTP/HRIS) — they just sign in through your IdP instead of setting a Vantage Fit password.
Troubleshooting
If an employee's SSO sign-in fails after go-live, the most common causes are:
- Not in your IdP — the employee's identifier isn't recognised by your identity provider. Verify they exist in your IdP and are in the SAML application's user group.
- Mismatched identifier — the IdP returns one identifier (e.g. personal email) but Vantage Fit is matching on another (e.g. work email or employee ID). Your IT team can check the SAML response in their IdP's audit logs.
- Account not yet in Vantage Fit — the employee was added to your IdP but not yet provisioned to Vantage Fit via CSV/SFTP/HRIS. Provisioning happens through the normal employee-add flow, separate from SSO.
For other SSO errors, contact your account manager or email support@vantagecircle.com with the employee's email and the exact error they're seeing.
Need more help? Contact your Vantage Fit account manager or email support@vantagecircle.com.
Related articles: