Tenant administration and SSO

Tenant admins manage the users and single sign-on (SSO) settings for their tenant. Open Tenant Administration from the user menu in the top-right of the dashboard, or go directly to https://dashboard-eu-prd1.xmpvs.com/tenant-admin.

The left-hand navigation under Tenant Management shows:

Users — view users, change their role, or remove them from the tenant.
SSO Configuration — visible only for tenants that have been provisioned with single sign-on. It displays the parameters your Identity Provider needs and lets you test the connection. SSO is set up for your tenant by XMPie Support — tenant admins cannot add a new SSO provider themselves.

Signing in with SSO

Users in a tenant that has been provisioned with single sign-on sign in through their organization's Identity Provider instead of with an XVS user name and password.

On the XVS login screen, click Login with SSO and enter your organization ID (tenant ID). You are then redirected to your Identity Provider to authenticate, and returned to the XVS dashboard once you are signed in. Users who are not part of an SSO tenant continue to sign in with their user name and password.

Alternatively, you can sign in directly by navigating to
https://dashboard-eu-prd1.xmpvs.com/sso/{organizationId}, replacing {organizationId} with your organization ID. This takes you straight to your Identity Provider, without the login screen.

Tenant information

The card at the top of the page summarizes your tenant:

Field	Description
Tenant ID	Unique identifier for your organization (tenant).
Name	The display name of your tenant.
Remaining Credits	Render credits left on your subscription.
SSO Status	Whether SSO is configured — SAML, OIDC, or None.

Managing users

Open Users from the sidebar. Each row shows the user's ID, email, role, and an actions column.

About the User ID. For SSO-provisioned users, XVS prefixes the user name with the tenant/organization ID. For example, abc_john.doe@abc.com.

Roles

admin — can open Tenant Administration and manage users and SSO.
member — can use the dashboard (create projects, render, view analytics) but cannot open Tenant Administration.

Change a user's role

Locate the user in the table.
Open the Role dropdown on that row.
Choose admin or member. The change takes effect immediately — the user sees new permissions on their next page load.

Your own row is marked (you). You can change your own role, but if you demote yourself to member you'll lose access to this page.

Remove a user

Click the trash icon in the Actions column and confirm. The user is removed from this tenant only. If they belong to an SSO-provisioned tenant and their IdP account is still assigned to XVS, they'll be re-added automatically the next time they sign in — remove them from the IdP too if the removal should be permanent.

Add new users

SSO-provisioned tenants — users are added automatically the first time they sign in through your Identity Provider, as long as their IdP account is assigned to the XVS application.
Username/password tenants — contact XMPie Support to invite additional users.

SSO configuration

Open SSO Configuration from the sidebar. This section is visible only for tenants that have been provisioned with single sign-on; XMPie Support sets up the initial provider on your behalf.

Service Provider (SP) Parameters

These are the values that must be entered into your Identity Provider's application configuration:

ACS URL — the callback URL where the IdP posts the SAML response.
Entity ID — the SP identifier that the IdP will target.

Copy these into your Okta / Azure AD / Auth0 / other IdP application if you need to reconfigure the IdP side.

IdP-Initiated SSO Parameters

XVS displays additional values you paste into your IdP's application tile so users can launch XVS directly from their IdP portal:

SAML — RelayState (set as the Default RelayState in your IdP's SAML app) and, alternatively, a Login URL you can use as the app-tile link.
OIDC — Login URL to use as the app-tile launch URL.

SAML certificate expiration

The SAML provider card shows a Certificate Expires date. Contact XMPie Support to refresh your IdP's metadata in XVS before this date — users cannot sign in through an expired certificate.

Test the connection

Click Test Connection on the provider card to verify that XVS can reach your IdP and that the mapping is set up correctly. The test lists each check with a pass/fail status; fix any failing check in your IdP and re-run.

Removing an SSO provider is handled by XMPie Support — contact them if you need to disconnect or replace your Identity Provider.