--- title: Now Available — Access Server 2.11.0 Update description: OpenVPN Access Server now supports identity federation with SAML. You can now use a third-party IdP for SSO access to the administration and client portals. image: https://blog.openvpn.net/hubfs/social-suggested-images/thom-XyNi3rUEReE-unsplash-2.jpg --- - [Blog](https://blog.openvpn.net) - [Announcements](https://blog.openvpn.net/tag/announcements) # Now Available — Access Server 2.11.0 Update Jul 21, 2022 • 2 min read ![laptop openvpn](https://blog.openvpn.net/hubfs/social-suggested-images/thom-XyNi3rUEReE-unsplash-2.jpg) Share - - - - By OpenVPN Team OpenVPN Access Server now supports identity federation with SAML. You can now use a third-party IdP for SSO access to the administration and client portals. The latest [release](https://openvpn.net/vpn-server-resources/release-notes/) of OpenVPN [Access Server](https://openvpn.net/access-server/) supports identity federation with [SAML (Security Assertion Markup Language)](https://openvpn.net/faq/does-access-server-support-saml/). You can now use a third-party SAML IdP to 1) establish SSO access to the client portal, and 2) authenticate prior to VPN connection. The industry standard SAML 2.0 is used to securely exchange SAML assertions passing information about a user between a SAML authority (aka *identity provider* or *IdP*), and a SAML consumer (aka *service provider* or *SP*). Access Server authentication service uses this information to provide federated single sign-on (SSO) for users authorized to use the VPN. > SAML ensures that users are real and who they say they are for all external services and apps. In other words, SAML ensures that users are real and who they say they are for all external services and apps.  ## **Access Server SAML Supports SSO With Your Preferred IdP** Johan Draaisma, Access Server Product Manager, explains that with this update, “OpenVPN Access Server makes it easy for administrators to set users up to [authenticate against an IdP](https://openvpn.net/access-server-manual/authentication-saml/) they’re using for SSO, be it [Azure AD](https://openvpn.net/vpn-server-resources/saml-setup-azure/), [Google Workspace](https://openvpn.net/vpn-server-resources/saml-setup-gsuite/), [OneLogin](https://openvpn.net/vpn-server-resources/saml-setup-onelogin/), [Okta](https://openvpn.net/vpn-server-resources/saml-setup-okta/), or [Keycloak](https://openvpn.net/vpn-server-resources/saml-setup-keycloak/). Doing this allows users to log in to their Access Server web portal using SSO. Plus, the same credential can be used to authenticate VPN sessions as other corporate web applications providing SSO.”  Additional high-value benefits of this capability: 1. Identity and password management, as well as use of 2FA and other authentication tools, are centralized at the IdP. 2. IT staff can give VPN application access to required users at the Identity Provider. 3. IT staff do not need to configure the Access Server with users. ## **Getting Started With Access Server 2.11.0 and SAML Single Sign-On Authentication** Using Access Server to delegate user authentication to a SAML identity provider is a straightforward four-step process: **Step 1:** Sign in to the Admin Web UI. **Step 2:** Click Authentication \> SAML and save the SP Identity and SP ACS information for the Access Server. **Step 3:** Sign in with the IdP to provide the Access Server information and create a SAML app. **Step 4:** Provide the IdP SAML app data to Access Server (with metadata or via manual entry). Please note that accessing this enhanced SAML functionality requires an up-to-date client, either [OpenVPN Connect (v3.3)](https://openvpn.net/vpn-client/) or a recent open source client. We encourage you to take advantage of these additional resources on OpenVPN.net: - [SAML page from the Admin Web UI User Manual](https://openvpn.net/access-server-manual/authentication-saml/). - [How to configure SAML with Azure AD](https://openvpn.net/vpn-server-resources/saml-setup-azure/). - [How to configure SAML with Google Workspace](https://openvpn.net/vpn-server-resources/saml-setup-gsuite/). - [How to configure SAML with OneLogin](https://openvpn.net/vpn-server-resources/saml-setup-onelogin/). - [How to configure SAML with Keycloak](https://openvpn.net/vpn-server-resources/saml-setup-keycloak/). - [How to configure SAML with Okta](https://openvpn.net/vpn-server-resources/saml-setup-okta/). - [How to configure SAML with JumpCloud](https://openvpn.net/vpn-server-resources/saml-setup-jumpcloud/). A comprehensive guide to new features, bug fixes, and improvements included in this update is available in the [OpenVPN Access Server 2.11.0 Release Notes](https://openvpn.net/vpn-server-resources/release-notes/).   ## Related posts from OpenVPN ### [![OpenVPN Access Server vs. Pritunl: Key Differences and Use Cases](https://blog.openvpn.net/hubfs/OpenVPN_Blog_CompetitorComparison_PairedCardsLight_2500x720.png) Access Server Sep 29, 2026 OpenVPN Access Server vs. Pritunl: Key Differences and Use Cases](https://blog.openvpn.net/openvpn-access-server-vs-pritunl) ### [![Now Available on Cloud Marketplaces: OpenVPN Access Server 2.11](https://blog.openvpn.net/hubfs/Imported_Blog_Media/Featured-Image-9-1.png) Announcements Oct 25, 2022 Now Available on Cloud Marketplaces: OpenVPN Access Server 2.11](https://blog.openvpn.net/openvpn-access-server-2-11-update/) ### [![Try OpenVPN for Business for Free: Remote Access VPN and Zero Trust Network Access Without the Risk](https://blog.openvpn.net/hubfs/openvpn-blog-header-minty.png) Announcements Jun 22, 2026 Try OpenVPN for Business for Free: Remote Access VPN and Zero Trust Network Access Without the Risk](https://blog.openvpn.net/try-openvpn-for-business-free-remote-access-vpn-and-zero-trust-network-access-without-the-risk) ### Subscribe for Blog Updates ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "OpenVPN Team", "url" : "https://blog.openvpn.net/author/openvpn-marketing" }, "dateModified" : "2025-02-28T03:30:28.372Z", "datePublished" : "2022-07-21T11:00:00.000Z", "headline" : "Now Available — Access Server 2.11.0 Update", "image" : [ "https://blog.openvpn.net/hubfs/social-suggested-images/thom-XyNi3rUEReE-unsplash-2.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.openvpn.net/access-server-211-supports-saml/", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.openvpn.net/hubfs/Dark=True%20Medium.png" }, "name" : "OpenVPN" } } ```