How Meiro CDP Integrates with Your Company’s Single Sign-On (SSO) System

Meiro Customer Data Platform (CDP) integrates seamlessly with your organization’s Single Sign-On (SSO) solution using the OpenID Connect (OIDC) standard.
This ensures that users can access Meiro securely through their existing corporate identity provider, improving both security and user experience.

By using OIDC, Meiro is compatible with all major identity providers (IdPs) that support this protocol — such as Okta, Microsoft Entra ID (Azure AD), Google Workspace, and other OIDC-compliant systems.

---

Benefits of SSO Integration

Implementing OIDC-based SSO with Meiro offers several advantages:

• Centralized authentication — passwords are never stored in Meiro; your IdP handles authentication.

• Simplified user management — manage permissions and user lifecycle (onboarding/offboarding) directly in your company’s identity system.

• Unified user experience — access all enterprise tools, including Meiro, with a single login.

• Improved security posture — supports MFA and follows enterprise-grade encryption standards.

• Compliance-friendly — aligns with ISO 27001, GDPR, and NIST security frameworks.

---

Supported SSO Standards

Meiro supports OpenID Connect (OIDC) — a modern, secure, and widely adopted standard for federated authentication.

Meiro CDP can be configured to use your preferred identity provider during deployment or at a later time upon request.

---

SSO Across Meiro Components

All authenticated sessions respect the access rules and privileges defined in your SSO system.

---

Access Management and Roles

Once SSO is integrated, Meiro enforces role-based access control (RBAC) aligned with your organization’s directory structure.

Typical setup includes:

• Administrators – manage configuration, users, and permissions.

• Data Engineers / Analysts – full access to Meiro Integrations and data layers.

• Business Users / Marketers – limited, read-only access in Business Explorer.

Permissions can be further customized per feature, channel, or dataset.
Access can also be tied to PII visibility settings for enhanced privacy.

---

Multi-Factor Authentication (MFA)

MFA is supported through your OIDC provider.

This means users can log in to Meiro using the same MFA mechanisms they already use, such as:

• Okta Verify

• Microsoft Authenticator

• Google Authenticator

• SMS or email verification

Meiro does not store MFA credentials; the identity provider handles authentication fully.

---

Security & Compliance

Meiro’s OIDC-based SSO integration follows modern best practices:

• Encryption in transit (HTTPS, TLS 1.2+).

• Role-based authorization is enforced by both Meiro and your IdP.

• Strict isolation — each client’s environment is fully separate.

• Compliance alignment with OWASP and NIST recommendations.

Each client’s Meiro instance is isolated at the infrastructure level, ensuring no shared authentication layers between tenants.

---

Setup & Configuration

Typical setup steps:

1. Provide your OIDC configuration details (Client ID, Client Secret, Issuer URL).

2. Meiro team connects your instance with the IdP and tests authentication.

3. Verify user roles and permissions.

4. Optionally enable MFA enforcement and PII visibility restrictions.

SSO configuration can be added during deployment or later as part of managed support.

---

Troubleshooting and Support

If your users experience login or permission issues:

1. Confirm that the user is active in your IdP directory.

2. Verify that their assigned role in Meiro aligns with your access policy.

3. Contact support@meiro.io for assistance.

You can also refer to www.meiro.io/user-security-guidelines for details on authentication, MFA, and password policies.

---

Summary

---

In short

Meiro CDP integrates with your organization’s Single Sign-On (SSO) system through OpenID Connect (OIDC) — the modern industry standard for secure and seamless authentication.

This ensures that your users can log in with their existing corporate credentials, while your IT team retains complete control over authentication, access, and compliance.