QuickCRM Mobile gives you access to SuiteCRM on your mobile, your tablet (iPhone, iPad, Android) or your laptop with QuickCRM native apps available on App Store, Google Play and Windows Store.
#6000 - Inquiry regarding SSO integration and security requirements for QuickCRM
Dear QuickCRM Support Team,
We are currently using SuiteCRM 8.10.2 and are exploring options to integrate our mobile users via QuickCRM. As our SuiteCRM instance relies on Single Sign-On (SSO) for user authentication, we have a few technical questions regarding the mobile app's capabilities and security requirements:
SSO Support: Is it possible to enable SSO (e.g., SAML or OAuth2) authentication directly within the QuickCRM app, or does the app require a local database password for authentication? User Authentication: Many of our users are configured with external_auth_only = 1 in SuiteCRM, meaning they have no local password stored in our database. Is it possible for these users to authenticate via the app, or does the app strictly require a local user credential? Security Standards: Could you provide documentation or an overview of the security standards and authentication flows the QuickCRM app employs when connecting to a SuiteCRM instance? We need to ensure that our mobile access aligns with our company’s security policies. If SSO is not natively supported in the app, do you have any recommended best practices for securely integrating users who are managed exclusively through an external Identity Provider?
Thank you for your assistance. We look forward to your feedback.
-
"works well." - support22
Read More Reviews
- Most Recent Love from Users
Ricardo Cairello- atsakaliscrm
- Ricardo Cairello
- gabriel1
- PLAN42 AB
- Ricardo Cairello
one week ago
Hello,
Thank you for your questions. Good news on the main point: SSO is natively supported by QuickCRM Mobile, and users managed exclusively through an external Identity Provider can use the app without any local password.
**1. SSO support ** Yes. It requires version 8.1.0 or later of the mobile app (iOS / Android).
QuickCRM does not implement its own authentication mechanism — it relies entirely on your SuiteCRM instance's authentication layer. At sign-in, the app opens a secure web view onto your own instance, which applies your configured authentication method unchanged (SAML, LDAP, or OAuth2/OIDC where a compatible module is in place). The user is redirected to your Identity Provider and authenticates there, under your own policies: MFA, conditional access, password rules, session lifetime. Credentials never transit through the app.
**2. Users with external_auth_only = 1 ** These users authenticate through the app without any issue. The SSO sign-in path performs no local password or credential verification: the identity is established by your Identity Provider, and the app then verifies that the corresponding SuiteCRM account is active.
So there is no need to create local passwords for your SSO-only users. Deactivating a user in your IdP, or setting their SuiteCRM account to Inactive, immediately blocks mobile access — centralised revocation is fully preserved, and no parallel credential is introduced.
**3. Security standards ** The security model inherits directly from your SuiteCRM instance: