In this story
Where: Settings → Team & security → Single sign-on
Open this page: admin.<your-site>/settings/sso (replace <your-site> with your site address). If you don’t see it in the menu, turn on Show all settings on the Settings page.
Before you start
- Only the site owner can change this.
- Press Test settings first, so members can get back in.
Steps
- Open Settings → Team & security → Single sign-on.
- Under Accounts, optionally turn on Create accounts automatically (just-in-time). It is off by default. A person from an allowed domain with no account gets one the first time they sign in, with the role from the mapping or the default role. When off, people need an invite first.
- Optionally turn on Require single sign-on for everyone except owners. Members then cannot use a password.
- If you turn it on, confirm "Require single sign-on?" with Require it and sign them out.
- Save.
Good to know
- Saving the require option signs out every member who is not an owner. They sign in again with the company login.
- Owners keep email, password and two-step code, so you cannot lock yourself out.
Questions
Frequently asked questions
Do I need to invite people first?
Only when automatic accounts are off.
Does the owner need single sign-on?
No. Owners keep email, password and two-step code.