UniFi Identity Enterprise - Add Expensify as an SSO App

Once you add Expensify as an SSO App, your users can sign in to Expensify using their Identity Enterprise credentials, and you can securely manage their access and lifecycle within Identity Enterprise.

Requirements

Before setting up Single Sign-On with Expensify you will need to make sure your domain has been verified. 

Add Expensify to Identity Enterprise

1. Go to Identity Enterprise Manager > SSO Apps.
2. Click the Add icon in the upper right corner and select Expensify.
3. Click Add.
4. Click to download Identity Provider Metadata. You’ll need to upload this file to Expensify in the next section.

Configure SSO in Expensify

1. Sign in to your Expensify account.
2. In the left navigation pane, choose Admin > Domain Control.
3. On the Domain Control page, select your domain name under the DOMAIN column.
4. In the left navigation pane, choose SAML.
5. Toggle the SAML Login option.
6. (Optional) Enable the Required for login option. Note: It is recommended that you test the configuration to ensure it works correctly before enabling this option.
7. Open the downloaded metadata XML file, copy its entire content, and paste it into the Identity Provider Metadata textbox.

Configure the Expensify SSO Settings in Identity Enterprise

1. Navigate back to the Add Expensify page and scroll down to the Settings section.

2. Name the app, for example: Expensify.
3. Fill in your company domain.
4. Fill in the SAML default relay state as needed. It is the destination to which the user will be redirected after they have completed the authentication process at the Identity Provider (IdP).
5. Click Add.

Assign App Access to Users

To enable users to access Expensify with SSO, follow these steps:

1. Create Users in Expensify:
   • Ensure that the email address used for their Expensify accounts matches their Identity Enterprise Account email.
2. Assign Expensify Access:
   • Individual Users:
     1. Navigate to Identity Enterprise Manager > Members > Users.
     2. Select the user.
     3. Go to Permissions > SSO App.
   • User Groups:
     1. Navigate to Identity Enterprise Manager > Members > Groups.
     2. Select the group.
     3. Go to Permissions > SSO App.
   • Direct Assignment:
     1. Navigate to: Identity Enterprise Manager > SSO Apps.
     2. Select Expensify from the app list.
     3. Go to the Assignments tab.

This ensures that users are properly configured for SSO access to Expensify.