Note:The feature is available for users with Enterprise plan.
Overview
Single Sign-On (SSO) is an authentication method that allows users to securely access multiple applications and websites using a single set of credentials. It enhances security while providing a seamless login experience.
SSO authentication via SAML 2.0 (Security Assertion Markup Language) is supported, allowing integration with identity providers such as Azure AD, ADFS, Cisco Duo, Okta, and PingOne.
How to enable SSO for workspace
SSO configuration is handled through the Support team:
Submit a request to Support, including your metadata XML file.
The team will proceed with the verification process and then generate the Identifier and reply URLs, providing the necessary metadata.
Apply these settings in your identity provider.
The next time you want to access your account, click Log in with SSO, provide your email address, and follow the instructions.
SSO-only
With SSO-Only Authorization, organizations enforce authentication exclusively through SSO, removing email and password login options. This replaces the email domain-based authentication process and introduces a more centralized approach to access control.
Key differences between SSO and SSO-only:
Feature | SSO | SSO-only |
Login method | Email/password or SSO | Only SSO |
Workspace login page | Displays SSO as an option | SSO is the only login option |
Additional authentication when switching workspaces | May be required | Only required for workspaces needing re-authentication |
To enable SSO-only authentication
Contact the Support team to activate the SSO-only.
Once enabled, navigate to Manage workspace and account >My workspace.
Go to the Workspace settings sectionю
Toggle the SSO-Only ON.
Confirm the changes.
Note:Enabling SSO-only authentication will automatically log out any users who are currently logged into the workspace. They will need to reauthenticate using SSO to regain access.
