SAML
Vault is SAML v 2.0 compliant and able to support most IdPs. Vault only uses SAML protocol for SSO to the UI.
OAuth 2.0/OpenID Connect
Vault File Manager and Vault Mobile use OAuth 2.0/OpenID Connect and have been tested with and can support the following authorization servers:
- ADFS 4.0, 5.0
- Microsoft Entra ID
- Okta
- PingFederate 8.x, 9.x
Support Matrix
These IdPs have been tested by Veeva:
| IdP | Vault Supported SAML | VFM Supported OAuth/OIDC | Vault Mobile Supported OAuth/OIDC |
|---|---|---|---|
| ADFS 4.0, 5.0 | X | X | X |
| Microsoft Entra ID | X | X | X |
| Okta | X | X | X |
| PingFederate – 8.x, 9.x | X | X | X |
These IdPs are in use by customers, but have not been officially tested by Veeva:
| IdP | Vault Supported SAML | VFM Supported OAuth/OIDC |
|---|---|---|
| ADFS 2.0,3.0 | X | |
| Auth0 | X | |
| Centrify | X | |
| Exostar | X | |
| IdentityNow | X | |
| Liferay | X | |
| OneLogin | X | X |
| PingOne | X | |
| Siteminder | X | |
| VMware Identity Manager | X |