Overview

One of the perks of Enterprise is Single Sign On for your organization. Before this can be turned on, make sure to reach out to your Sales Associate. Once SSO is Enabled, Two-Factor Authentication can’t be set up within your organization settings.

Tip: Every SSO provider does things differently, so this is a general guide. We have guides for several major SSO providers here:

• Microsoft Entra ID
• Google SSO
• Okta
• OneLogin

Setting Up Single Sign On

1. In the Admin Console, click on Security on the left-hand side of the page.

2. Click on Add SSO Provider in the middle of the screen, to the right of Single Sign-On (SSO).

3. Click on the Upload XML Metadata button and select your XML file.

Tip: If you don’t have your SSO provider’s XML Metadata file, click on the Configure Manually button and skip to Step 6 to enter the configuration information.

4. Fill out your Provider Name and click on the Save Configuration button.

Tip: If you want to test if the settings are correct, but aren’t ready to enable SSO, you can click on the Test Connection button, instead.

5. Click on the Close this window button.

Alert: Manual Configuration

6. Enter your Provider Name, which is the name users will see on the login page, and your SSO provider’s information into the fields.

Tip: Not all SSO providers use the same information or fields, so check with your SSO provider or one of the provider-specific guides linked at the top of this guide for more information.

7. Click on the Save Configuration button.

8. Once you see the confirmation message, click on the Close this window button.

Additional SSO Options

In addition to the basic setup, there are extra settings you can enable for more control over how SSO works in your organization. These settings can be toggled on or off depending on your needs:

• Allow Email Login for Licensed Users
  When this option is enabled, licensed users can log in using their email and password in addition to SSO. If you prefer stricter security and want users to only log in via SSO, you can keep this option disabled.

• Require Single Sign-On for Guest Accounts
  This option enforces SSO for guest accounts. When enabled, guest users must sign in with SSO and cannot log in using email and password. If disabled, guest accounts will still have the flexibility to log in either with SSO or email and password.

Tip: If you would like to add more than one SSO provider, please contact your Account Manager. Multiple providers can also be configured.