SAML single sign-on and session controls for your analytics portal
EmbedPortal supports SAML single sign-on, so users sign in with your identity provider. Admins can enforce auto-logout after inactivity, ask members to confirm they still need access on a schedule, and review or revoke active sessions.
How it works
Most teams finish these steps in under an hour.
Open SSO / SAML
In Organization Settings, open SSO / SAML.
Add your identity provider
Enter the IdP metadata URL and copy the ACS URL into your identity provider.
Map attributes
Choose the email and group attributes. Groups can be assigned automatically from IdP claims.
Set session policy
Turn on auto-logout and access re-verification, then save the policy.
What it looks like in EmbedPortal
SSO and security features
SAML SSO
Works with identity providers that support SAML 2.0.
Group mapping
Assign portal groups from IdP group claims.
Auto-logout
Sign users out after a period of inactivity, from 5 minutes to 30 days.
Access re-verification
Members periodically confirm they still need access.
Active sessions
See where users are signed in and revoke a session.
Activity log
Logins, exports and admin changes are recorded.
Why session controls matter
Analytics portals often hold revenue, pricing and customer data. Access should end when people leave, and idle sessions should not stay open forever.
SSO, auto-logout and access re-verification handle that without extra work from your team.
Common questions
Does EmbedPortal support SAML SSO?
Yes. Connect any identity provider that supports SAML 2.0 using its metadata URL.
Can I automatically log out inactive users?
Yes. Set an idle timeout between 5 minutes and 30 days.
What is access re-verification?
A periodic check where members confirm they still need access. It helps remove stale accounts.
Share your first dashboard this week.
Connect your BI tool, set up groups and row-level security, and invite viewers. One flat price with unlimited viewers.