了解你的企业组织如何使用你的身份提供者来管理团队中的 Expo 用户。

---

企业计划 客户可以使用单点登录 (SSO)。

¥Single Sign-On (SSO) is available for Enterprise plan customers.

要开始，请为 Expo SSO 准备你的身份提供者 (IdP)，并按照下面的 IdP 配置指南 收集信息。完成此操作后，你组织的所有者可以按照指示执行 启用 SSO。

¥To get started, prepare your identity provider (IdP) for Expo SSO and gather information by following the configuration guide for your IdP below. Once you have done this, an owner of your Organization can follow instructions to enable SSO.

如果你有疑问或问题，请联系 联系我们，我们将帮助你设置组织。

¥If you have questions or issues, contact us and we'll help you set up your organization.

身份提供商支持

¥Identity provider support

Expo SSO 支持以下身份提供商：

¥Expo SSO supports the following identity providers:

我们实现 OpenID 连接发现 1.0 规范，并正在努力验证其他兼容的身份提供商。如果你使用其他身份提供商并且对 SSO、让我们知道 感兴趣。

¥We implement the OpenID Connect Discovery 1.0 specification and are working to verify additional compatible identity providers. If you use another identity provider and are interested in SSO, let us know.

在组织上设置 SSO

¥Setting up SSO on an organization

SSO 用户登录

¥SSO user sign in

Expo 网站

¥Expo website

Expo CLI

适用于 SDK 50 及更高版本。对于以前的版本，Expo CLI 将在通过 EAS CLI 登录后使用你的 SSO 账户。

¥Available with SDK 50 and above. For previous versions, the Expo CLI will use your SSO account after logging in via the EAS CLI.

使用 Expo CLI 时，你可以运行以下命令登录你的 Expo 账户。

¥When using the Expo CLI, you can run the following command to log in to your Expo account.

系统将提示你在浏览器中通过 Expo 网站登录，完成后将重定向回 CLI。

¥You will be prompted to log in via the Expo website in a browser and will be redirected back to the CLI upon completion.

EAS 命令行接口

¥EAS CLI

使用 EAS CLI 时，你可以运行以下命令登录你的 Expo 账户。

¥When using the EAS CLI, you can run the following command to log in to your Expo account.

系统将提示你在浏览器中通过 Expo 网站登录，完成后将重定向回 CLI。

¥You will be prompted to log in via the Expo website in a browser and will be redirected back to the CLI upon completion.

Expo

SSO 用户限制

¥SSO user restrictions

SSO 用户就像普通用户一样。但是，有一些已知的例外情况：

¥SSO users are like regular users. However, there are a few known exceptions:

• SSO 用户只能属于其 SSO 组织。他们也不能创建额外的组织。

  ¥SSO users can only belong to their SSO organization. They also cannot create additional organizations.

• SSO 用户无法离开其 SSO 组织。这样做会删除其 SSO 用户。

  ¥SSO users cannot leave their SSO organization. Doing so deletes their SSO user.

• SSO 用户无法登录 Expo 论坛。

  ¥SSO users cannot log in to the Expo forums.

• SSO 用户无法为其个人账户订阅 EAS。

  ¥SSO users cannot subscribe to EAS for their personal accounts.

单点登录管理

¥SSO administration

新组织和现有组织都可以启用 SSO 作为登录选项。拥有现有非 SSO 成员的组织可以启用 SSO，然后将新成员引导至 SSO 登录页面，而现有用户则继续使用其当前的 Expo 凭据。为了支持外部贡献者，支持 SSO 的组织还允许通过电子邮件邀请其他非 SSO 用户。

¥Both new organizations and existing organizations can enable SSO as a sign in option. Organizations with existing non-SSO members can enable SSO and then direct new members to the SSO sign-in page, while existing users continue to use their current Expo credentials. To support external contributors, SSO-enabled organizations also allow inviting additional non-SSO users via email.

将现有用户转换为 SSO

¥Transitioning existing users to SSO

普通用户可能是一个或多个个人、团队和组织账户的成员，而 SSO 用户只属于其组织账户。因此，现有用户无法直接转换为 SSO 用户。但是，已经是你组织成员的普通用户可以通过转至 单点登录页面 创建第二个用户。然后，可以从组织中删除他们的常规用户。

¥Regular users may be a member of one or many personal, team, and organization accounts while SSO users belong exclusively to their organization account. Thus, existing users cannot be directly converted into SSO users. However, a regular user who's already a member of your organization may create a second user by going to the SSO login page. Then, their regular user can be removed from the organization.

要从使用常规 Expo 账户转换为 SSO 账户，请执行以下步骤：

¥To transition from using a regular Expo account to an SSO account, follow these steps:

如果你希望在新的 SSO 用户账户上重复使用旧用户名，你可以在创建 SSO 账户之前转到旧用户下的 用户设置 并重命名它。或者，你可以在删除旧用户后重命名 SSO 用户账户的 Expo 用户名。虽然 Expo 用户名必须是唯一的，但如果你的身份提供商上的电子邮件地址与你的旧用户的电子邮件地址相匹配，就可以了。

¥If you wish to reuse your old username on your new SSO user account, you can go to User settings under your old user and rename it before creating your SSO account. Alternatively, you can rename your SSO user account's Expo username after deleting your old user. While Expo usernames need to be unique, it is OK if your email address on your identity provider matches the email address of your old user.

删除 SSO 用户

¥Remove SSO users

如果有人离开你的组织，请在你的 IdP 中删除或禁用他们。根据你使用 IdP 配置的令牌刷新持续时间，被删除的用户随后将失去对其 Expo 账户的访问权限。如果你希望提前删除它们，或者你希望删除它们以清理你账户中的用户，你可以在组织成员设置页面上执行此操作：

¥If someone has left your organization, remove or disable them in your IdP. Depending on the token refresh duration you configured with your IdP, the removed user will subsequently lose access to their Expo account. If you wish to remove them ahead of that time or you wish to remove them to clean up users on your account, you may do so on the organization Member settings page:

更改计费或停止使用 SSO

¥Change billing or discontinue use of SSO

需要有效的企业计划才能继续使用 SSO。联系我们 如果你希望停止使用 SSO 或更改你的计划。

¥An active Enterprise Plan is required to continue using SSO. Contact us if you wish to discontinue the use of SSO or change your plan.

为了确保无论是否启用 SSO，都能不间断地访问你的组织，SSO 组织必须保留至少一名具有所有者角色的非 SSO 用户作为成员。

¥To ensure uninterrupted access to your organization whether or not SSO is enabled, SSO organizations must keep at least one non-SSO user with the Owner role as a member.

删除 SSO 组织

¥Delete SSO organization

为组织配置 SSO 后，Expo 团队必须手动完成账户删除。联系我们 寻求帮助。

¥Once SSO is configured for an organization, account deletion must be done manually by the Expo team. Contact us for assistance.