Configuring the Single Sign-On (SSO) integration with Parallels My Account

Integration between Parallels My Account and corporate Identity Providers (IdP) like Microsoft Entra ID, Okta, or Ping Identity enables Single Sign-On (SSO) login to Parallels My Account and automatic provisioning and revocation of Parallels product licenses to end users in your organization. The organization’s business account admins can log into My Account using their company's standard authentication procedure, while the end-users can activate Parallels products on their devices via Single Sign-On.

Note: In the case of Parallels Desktop for Mac Enterprise Edition, a mixed licensing policy will be adopted before the end of 2024, enabling administrators to combine fixed per-device license seats and SSO per-user license seats as they see fit.

Even if your organization does not use Parallels Desktop for Mac Business or Enterprise Edition, you may benefit from the SSO integration with My Account. Such integration provides more control over the users with administrative access to the Parallels product licenses stored in the organization’s business account registered with Parallels.

Note: If members of the Admin group need to also be able to use Parallels Desktop for Mac, they should be explicitly added to the Parallels Desktop users group.

Once the integration is configured, you can grant access to the organization’s business account to administrators by adding them to the Parallels Business Account Admins group in your Identity Provider’s directory. At the same time, deleting or blocking an administrator account in your Identity Provider automatically deprives them of access to Parallels My Account.

Note: The integration between Parallels My Account and IdPs relies on SAML 2.0 for SSO and SCIM 2.0 for user identity information synchronization.

In this section, we provide detailed instructions on how to set up the SSO integration with Microsoft Azure/Entra ID, Okta, and Ping Identity. Even if your corporate identity provider is not on the list, you can still try setting up the integration, provided your service of choice supports SAML 2.0 and SCIM 2.0 protocols.

Once the integration is completed, the administrators will be able to sign into the company's My Account page using the Continue with SSO button at https://my.parallels.com/login, while the Parallels Desktop for Mac users will be able to activate their local copies of the app using the SSO option.