UID Enterprise - Add Expensify as an SSO App

Once you add Expensify as an SSO App, your users can sign in to Expensify using their UID Enterprise credentials, and you can securely manage their access and lifecycle within UID Enterprise.

Requirements

Before setting up Single Sign-On with Expensify you will need to make sure your domain has been verified. 

Add Expensify to UID Enterprise

1. Go to UID Enterprise Manager > SSO Apps.
2. Click the Add icon in the upper right corner and select Expensify.
3. Click Add.
4. Click to download Identity Provider Metadata. You’ll need to upload this file to Expensify in the next section.

Configure SSO in Expensify

1. Sign in to your Expensify account.
2. In the left navigation pane, choose Admin > Domain Control.
3. On the Domain Control page, select your domain name under the DOMAIN column.
4. In the left navigation pane, choose SAML.
5. Toggle the SAML Login option.
6. (Optional) Enable the Required for login option. Note: It is recommended that you test the configuration to ensure it works correctly before enabling this option.
7. Open the downloaded metadata XML file, copy its entire content, and paste it into the Identity Provider Metadata textbox.

Configure the Expensify SSO Settings in UID Enterprise

1. Navigate back to the Add Expensify page and scroll down to the Settings section.

2. Name the app, for example: Expensify.
3. Fill in your company domain.
4. Fill in the SAML default relay state as needed. It is the destination to which the user will be redirected after they have completed the authentication process at the Identity Provider (IdP).
5. Click Add.

Assign App Access to Users

To enable users to access Expensify with SSO, follow these steps:

1. Create Users in Expensify:
   • Ensure that the email address used for their Expensify accounts matches their UID Enterprise Account email.
2. Assign Expensify Access:
   • Individual Users:
     1. Navigate to UID Enterprise Manager > Members > Users.
     2. Select the user.
     3. Go to Permissions > SSO App.
   • User Groups:
     1. Navigate to UID Enterprise Manager > Members > Groups.
     2. Select the group.
     3. Go to Permissions > SSO App.
   • Direct Assignment:
     1. Navigate to: UID Enterprise Manager > SSO Apps.
     2. Select Expensify from the app list.
     3. Go to the Assignments tab.

This ensures that users are properly configured for SSO access to Expensify.