Set up a custom SAML configuration
Before you start
Who can use this feature
Supported on the Organization and Enterprise plans
Only Organization Admins can set up SAML SSO.
You must use SAML 2.0 to set up SAML SSO with Figma.
Organizations that have stricter security requirements can configure SAML SSO. Learn more about SAML SSO in Figma →
If you do not use one of our supported identity providers, you can set up a custom SAML configuration. You must use SAML 2.0, Figma doesn't support earlier versions of SAML.
Note: you will need the following information from your identity provider to set up SAML SSO in Figma:
- IdP Entity Id: This lets us know which Identity Provider you are using.
- IdP SSO Target URL: We will use this link to connect to the Identity Provider when someone from your Organization attempts to login via SAML SSO.
- Signing Certificate: Usually called the X509 certificate. We use this to verify your Organization via your Identity Provider.
Set up SAML SSO in Figma
You need to decide if logging in via SAML SSO is mandatory, or if users can still login via email address and password. Learn about authentication options →
- Open Figma in the file browser and select Admin in the sidebar.
- Select Settings at the top of the screen.
- In the Log in and provisioning section, click SAML SSO.
- Figma will generate the information you need to complete the process with your identity provider. Find this in the Your configuration details are section.
- In the Identity provider section, select Other.
- Enter the details from your identity provider:
- IdP Entity ID
- IdP SSO Target URL
- Upload your Signing certificate and click Review.
- Check the box to confirm This information is correct... and click Configure SAML SSO.
Complete the set up with your identity provider
- View the details of your SAML SSO configuration in Figma. You'll need these to complete the configuration process with your Identity Provider:
- The SP Entity ID
- The SP ACS URL
- Make sure to configure the NameId using the following format:
Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
Tip: You can address any typos, or update your SAML SSO configuration at any time. Return to these settings and click the Edit configuration button. Learn more about editing your SAML SSO settings →
Let your users know about the change
The first time a user logs into Figma using SSO, or after they are provisioned via SCIM, they'll receive a verification email from SendGrid. This email contains a unique 6-digit pin, which they'll use just once as an additional security measure during their initial login.
To make sure users don't mistake the email for spam or a phishing attempt, you may wish to let them know about this extra step in advance.