How to Enable SSO Integration in Your Organization

You can enable Single Sign-On (SSO) so users can log in using their existing login credentials with your organization. This streamlines access management and adds an extra layer of security for your organization. Users only need a single login, reducing password-related issues and making sign-in faster and more convenient for your organization.

Enabling SSO Integration

If you’re the admin of your organization’s account, you can enable SSO through the Admin Console, so users can log in with your company’s identity provider. Here’s what to do:

1. First, in the Admin Console, in the menu on the left, click on Security.

2. Now, in the Single-Sign On (SSO) section, click on Add SSO Provider.

3. Next, click on Configure Manually.

4. Then, in the Add a SAML SSO Configuration window that opens up, fill in these details. You’ll find more info in our Identity Provider Reference Table below:

• Provider Name — The name you want users to see on the login page. You can use a more personalized name here for identification purposes.
• Entity ID —Your organization’s unique identifier in your Identity Provider (IdP).
• SSO URL — The login URL where users are redirected to authenticate via your IdP.
• Certificate — The X.509 Certificate or the one used to validate authentication requests.
• SLO URL — The logout URL to redirect users after signing out.

5. Finally, click on Test Connection to make sure everything’s working correctly. 

6. If it’s successful, click on Save Configuration to apply your SSO settings—and you’re good to go.

Now, after turning on SSO, you’ll see these extra options under the SSO settings:

• Allow Email Login for Licensed Users — This lets licensed users log in with their email and password too, not just through SSO.
• Require Single Sign-On for Guest Accounts — This makes sure guest users can only sign in through SSO, adding a bit more security.
• SCIM Provision Settings — This helps you automatically manage users by syncing with your identity provider, so you don’t have to update things manually.
• Just-In-Time (JIT) Access — This allows users to request temporary, time-limited access to restricted systems only when needed. It helps maintain security by granting elevated permissions on demand and automatically revoking them once the approved period ends.

Identity Provider Reference Table

Use this table to identify where to find the required SSO configuration fields in your specific IdP: