SSO and SCIM are only available to Dashlane Business plans.
Upgrade to Dashlane Business
Admins of Business plans can integrate Dashlane with any SAML 2.0 Identity Provider (IdP)—such as Azure, Okta, or Google Workspace—so that plan members can log in to Dashlane with SSO. Depending on their configuration, admins may also be able to set up SCIM with Dashlane to handle group and user provisioning.
Note: As an admin, you will still use a Master Password to log in to your Dashlane admin account, even if you set up SSO for your plan. We recommend having more than one admin on your plan in case you ever forget your Master Password.
Add another admin to your plan
Tip: If you’re deploying Dashlane for the first time, we recommend setting up SSO before inviting people to your plan so they can log in with SSO right away and won’t have to create a Master Password.
Step 1: Choose Dashlane Confidential SSO or self-hosted SSO
Before you can set up SSO, you have to choose between two options: Dashlane Confidential SSO and self-hosted SSO. Both options are equally secure and maintain Dashlane’s zero-knowledge security architecture.
If you only need to set up one domain and you don't need SCIM, we recommend Dashlane Confidential SSO because it's a simpler and faster setup experience.
If you need multi-domain support or SCIM, you should choose self-hosted SSO because Confidential SSO doesn't currently work with more than one domain or SCIM.
More about Dashlane Confidential SSO
Step 2: Follow the steps in the Admin Console to integrate with your IdP
After you’ve chosen Confidential SSO or self-hosted SSO, follow the steps in the Admin Console:
- Select the Dashlane D icon in your browser’s toolbar and enter your admin Master Password if prompted. In the extension pop-up, select More and then Open the Admin Console.
- Select Settings and then select Single sign-on.
- Choose to set up either self-hosted SSO or Confidential SSO.
Learn more about the difference between Dashlane Confidential SSO and self-hosted SSO
- Follow the steps in the Admin Console. If you’re not sure how to create a new SSO application with your Identity Provider, visit that provider’s Help Center:
Azure AD | ADFS | Okta | Google Workspace | Jumpcloud
FAQ about SSO and SCIM
What’s SSO and how can I use it with Dashlane?
Single sign-on, known as SSO, is an authentication scheme that allows your employees to log in to all of your organization’s software with a single login.
When integrated with Dashlane, SSO allows members of your Business plan to sign in to Dashlane using their SSO login instead of a Master Password. Members can sign in to Dashlane using SSO on the web, mobile, and Safari apps.
What’s SCIM and how can I use it with Dashlane?
System for Cross-domain Identity Management, known as SCIM, allows you to use each member’s status in your Identity Provider to provision and deprovision groups of members.
When integrated with Dashlane, SCIM makes it easier to add and remove members, or groups of members, from Dashlane.
Note: You can also create and manage groups with Dashlane, which is totally separate from SCIM. These groups don’t merge or sync with SCIM groups.
More about creating and managing groups with Dashlane
What’s an Identity Provider (IdP)?
Many organizations use an Identity Provider to manage and authenticate members’ access to applications and software with SSO and SCIM. Popular Identity Providers include Azure, Okta, and Google Workspace.
What Identity Providers (IdP) can I use with Dashlane?
You can use any SAML 2.0 Identity Provider, including Azure, Okta, and Google Workspace.
Is it secure to use SSO with Dashlane?
While many password managers wouldn’t be secure with SSO, Dashlane uses an encryption service to allow for SSO while retaining our zero-knowledge architecture. That way, data stored in Dashlane remains encrypted. Neither Dashlane nor your Identity Provider have your encryption key, so even if either experienced a breach, no one could access your data.
White paper: Dashlane’s security principles and architecture
What’s an encryption service?
Your logins and personal information are always “encrypted” in Dashlane. Encryption scrambles your data so no one can read it. To decrypt and access your encrypted data, a unique encryption key is needed.
An “encryption service” is a service that provides that unique encryption key. Without SSO, your Master Password acts as the encryption key, because only you know it. With SSO, we need a way to verify your identity to your Identity Provider without a Master Password. That’s what the encryption service is for.
We require anyone setting up SSO or SCIM with Dashlane to use an encryption service. It’s an essential layer of our zero-knowledge architecture that protects your data in the event of a breach.
We offer two options for your encryption service—Dashlane Confidential SSO and self-hosted SSO.
Can I access Dashlane offline after setting up SSO?
Because the Dashlane SSO connector needs to communicate with your Identity Provider to verify your login, you need to be connected to the internet to log in to your Dashlane account with SSO. However, SSO members with biometric unlock enabled on their mobile devices can access their vault using biometrics.
Is Virtual Desktop Infrastructure (VDI) supported with Dashlane SSO?
Yes, VDI is fully supported with Dashlane SSO.