Do I have to purchase Inbound Single Sign-on to setup SAML Single Sign-on?

There are some cases where users might think that NetSuite's feature 'Inbound Single Sign-on' has to be purchased to get started with SAML Single Sign-on. However, this should not be the case. 'Inbound Single Sign-on' does not need to be purchased to setup SAML Single Sign-on. SAML Single Sign-on is a free feature of NetSuite. One simply needs to enable SAML feature in Setup > Company > Enable Features > SuiteCloud tab and continue the setup from there.

Usually, if the user's preferred authentication mechanism is SAML, they will fall under one of the following categories. If they do, then they should keep in mind that they do not have to purchase 'Inbound Single Sign On':

a. They have bought an identity management product (for example: PingOne from Ping Identity) that aims to access a SaaS software like NetSuite through SAML.
b. They do not want the token-based Inbound SSO feature of NetSuite, and prefer to have a third-party manage their identity. Thus, they can take a look at SuiteAnswers article 'Getting started with SAML: List of third-party Identity Providers for SAML SSO' (Solution ID: 30090) to find the third-party companies that can help them with their setup.

'Inbound Single Sign-on' only needs to be purchased if the user's preferred authentication mechanism is token-based. Please see SuiteAnswers article 'Inbound Single Sign' (Solution ID: 15039) for more details about this feature.