What is SSO in dLocal?
Single Sign-On (SSO) lets your organization authenticate users with their corporate credentials, providing a secure and seamless way to access the Merchant Dashboard. Authentication is managed by your company’s Identity Provider (IdP).
Supported options
We support the following SSO protocols and providers:
SAML
OpenID Connect (OIDC)
Okta Workforce
Access and eligibility
SSO access is enabled at the organizational level and applies to all users with your company’s email domain. This ensures consistent access aligned with your corporate security policies.
Important to note:
Only one authentication method applies to the entire organization. You can choose either SSO or traditional credentials, not both in parallel.
How to enable SSO (overview)
Here is the typical activation flow, without technical details:
Select your organization’s preferred SSO protocol (SAML, OIDC, or Okta).
Share the required configuration details securely so we can connect your IdP to dLocal.
Configure your IdP according to your internal security policies (for example, assign applications, groups, and basic identity attributes).
Our team finalizes the configuration on the dLocal side to ensure compatibility and identity mapping.
Run a pilot with a small group of users to validate the login flow and overall experience.
Enable SSO for your entire organization after successful testing and internal approvals.
Important considerations
SSO is enforced for all users with your company’s email domain, based on domain routing.
Only one authentication method is allowed for the organization: SSO or traditional credentials.
Frequently asked questions
Which identity providers are supported?
We support SAML, OIDC, and Okta.
Can we run a pilot before rolling it out to everyone?
Yes. We recommend validating the flow and user experience with a limited group before going live for the whole company.
Does SSO replace traditional credentials?
Yes. By design, only one authentication method applies to your company.
How do I get started?
Reach out to your dLocal representative to begin the process. We will guide you through the next steps.
Notes
This article provides a high-level overview and does not include technical implementation details. If your team needs technical setup guides for SAML, OIDC, or Okta, request the corresponding documentation from your dLocal representative.