How do I connect my sign-in provider?

Where: Settings → Team & security → Single sign-on (Sign-in provider section)

Open this page: admin.<your-site>/settings/sso#sign-in-provider (replace <your-site> with your site address). If you don’t see it in the menu, turn on Show all settings on the Settings page.

Before you start

• Only the site owner can change this.
• Create an OpenID Connect app at your provider first.

Steps

1. Open Settings → Team & security → Single sign-on.
2. Choose the Provider: Google Workspace, Microsoft Entra ID, Okta or Other (OpenID Connect).
3. Optional: set the Button name shown on the sign-in page as "Sign in with …".
4. Enter the Provider address (issuer):
   • Google: https://accounts.google.com
   • Microsoft: your tenant address https://login.microsoftonline.com/<tenant id>/v2.0 (required)
   • Okta: for example https://yourcompany.okta.com
   • Other: the provider's OpenID Connect address
5. Enter the Client ID and Client secret from your provider.
6. Copy the Redirect address to register at your provider and add it as an allowed redirect (callback) address in your provider's app.
7. Turn on Allow sign-in with this provider.
8. Press Test settings, then save.

Good to know

• The secret is write-only. Leave it empty to keep the saved one.
• The test checks the signing keys at the provider and whether a secret is saved.

Common problems

• "We could not read the provider's settings from this address. Check the address and try again."

Questions

Related

• Single sign-on
• Who may sign in