How do I let my team sign in with a company login?

Where: Settings → Team & security → Single sign-on

Open this page: admin.<your-site>/settings/sso (replace <your-site> with your site address). If you don’t see it in the menu, turn on Show all settings on the Settings page.

Before you start

• Admins can read this page. Only the site owner can save, with a fresh sign-in.
• You need an account with a provider that supports OpenID Connect.

Steps

1. Open Settings → Team & security → Single sign-on.
2. Set up the provider.
3. Set the allowed email domains.
4. Set role mapping.
5. Choose account options.
6. Press Test settings and read the Test result: Looks good or Needs attention.
7. Save. The page says "Single sign-on settings saved".

Common problems

• "We could not read the provider's settings from this address. Check the address and try again."

Questions

Related

• Sign-in provider
• Who may sign in
• Roles from your provider
• Accounts on first sign-in
• Two-step sign-in rules