Platforms Supported and Availability

Device platform availability on SSO Connect Cloud

Keeper SSO Connect Cloud is launching in phases. If you immediately require all platforms supported including mobile devices, consider Keeper SSO Connect On-Prem:

Keeper Component


Web Vault


Admin Console


Keeper Desktop (Windows, Mac)


Chrome, Firefox, Safari, Edge extensions

Live (*)

Internet Explorer 11 Extension



In Beta


In Beta

Azure Function for Automated Approvals


Master Password to SSO Cloud migration


SSO On-Prem to SSO Cloud migration

Coming Soon


Q1 2020

(*) Notes:

Migration from On-Prem to Cloud SSO

The Keeper team is working on a seamless transition process from On-Prem to Cloud SSO to Cloud SSO, however this is currently not available. The current process to transition is the following:

  • User ensures that Account Recover (Security Question & Answer) is properly set by visiting the Vault > Settings > Reset Security Q&A

  • Move user from SSO node to non-SSO (root) node in the Admin Console

  • User performs "Forgot password" account recovery

  • Move user into SSO Cloud-enabled node

  • User signs into vault with SSO Domain for cloud-enabled node

Please do not attempt to migrate your SSO users to Cloud SSO until discussing a migration plan with the Keeper Team. Also, do not delete existing SSO On-Prem environments without consulting with the Keeper team.

SSO Connect Cloud vs SSO Connect On-Prem

SSO Connect Cloud:

  • No hosting of Service Provider application is required

  • Fast setup and configuration

  • No maintenance

  • Device Approvals require Keeper Push, Admin Approval or Auto-Approval Methods

  • Incognito Mode / Private Browsing are treated as new devices

  • Full platform support in October 2020

SSO Connect On-Prem:

  • Requires a Windows or Linux server to host the Service Provider application

  • Requires SSL certificate configuration for endpoint

  • Device Approvals performed via simple email link or verification code (no Admin Approval or Push Approvals required)

  • Browser Incognito Mode / Private Browsing does not require device approvals

  • Full platform support in production currently