• Home
• App Integrations
• Single Sign-On Integrations
• Temenos T24 Single Sign-On

How to Setup Temenos T24 SSO (Single Sign-On) Integration

---

This guide explains how to integrate Temenos T24 with the miniOrange Identity and Access Management (IAM) platform to enable secure Single Sign-On (SSO) using SAML 2.0. Depending on your deployment, miniOrange can act as an Identity Provider (IdP) or as a broker/Service Provider (SP) with your existing directory (such as Active Directory, Microsoft Entra ID, or LDAP). Once configured, users can access Temenos T24 with a single set of credentials, improving security, centralizing identity management, and reducing password fatigue across banking applications.

miniOrange provides a ready-to-use SSO solution for Temenos T24, so you can set up secure authentication and give users seamless access within minutes.

miniOrange and Temenos T24 Single Sign-On (SSO) integration supports the following features:

• A SAML Identity Provider (IdP), or
• A Broker, depending on your architecture.

Temenos T24 will be added in miniOrange as a Custom SAML Application.

Prerequisites

• Admin access to miniOrange and Temenos T24.
• SAML 2.0 metadata or configuration details from Temenos T24.
• miniOrange tenant with support for Custom SAML Applications.

Follow the Step-by-Step Guide given below for Temenos T24 Single Sign-On (SSO)

1. Configure Temenos T24 in miniOrange

• Login into miniOrange Admin Console.
• Go to Apps and click on Add Application button.



• In Choose Application Type, select SAML/WS-FED from the All Apps dropdown.



• Search for Temenos T24 in the list, if you don't find Temenos T24 in the list then, search for custom and you can set up your application in Custom SAML App.

• Temenos T24 Service Provider (SP) Details:
• SP Entity ID / Audience URI: (from Temenos T24)
• ACS (Assertion Consumer Service) URL: (from Temenos T24)



• In the Attribute Mapping tab configure the following attributes as shown in the image below.
• Name ID: Select user attribute (e.g., email)
• Name ID Format: Usually urn
  :oasis:names:tc:SAML:1.1:nameid-format:emailAddress



• To upload respective app logo for a Custom SAML App, click on Upload Logo tab.



• Click on Save.
• Your application is saved successfully. Now click on the three dots menu button against your newly created application. Go to Metadata.




• Here you will see 2 options, if you are setting up miniOrange as IDP copy the metadetails related to miniOrange, if you required to be authenticated via external IDP's (OKTA, AZURE AD, ADFS, ONELOGIN, GOOGLE APPS) you can get metadata from the 2nd Section as shown below.



• Select Show Metadata Details, then click on Download Metadata.

2. Configure miniOrange Metadata in Temenos T24

• Log-in to the Temenos T24 dashboard.
• Navigate to the Identity Provider configuration section..
• In Metadata Mode, select the option to upload metadata. Choose Metadata File. Click Browse and upload the file you previously downloaded in Step1.





• Click on Save to complete the configuration.

3. Test SSO Configuration

Test SSO login to your Temenos T24 account with miniOrange IdP:

Using SP Initiated Login

• Go to your Temenos T24 URL, here you will be either asked to enter the username or click on the SSO link which will redirect you to miniOrange IdP Sign On Page.



• Enter your miniOrange login credential and click on Login. You will be automatically logged in to your Temenos T24 account.

Using IDP Initiated Login

• Login to miniOrange IdP using your credentials.



• On the Dashboard, click on Temenos T24 application which you have added, to verify SSO configuration.





Not able to configure or test SSO?


Contact us or email us at idpsupport@xecurify.com and we'll help you setting it up in no time.

External References

• Guide For Single Sign On (SSO)
• What is Single Sign-On (SSO) and How does SSO Works?
• Explore the connection between SAML and SSO