Browse all Help Center topics
Help Center / Security & privacy / Single sign-on (SAML)
Single sign-on (SAML)
Let your team sign in with Okta, Microsoft Entra, Google Workspace or any SAML 2.0 provider.
Single sign-on is available on the Enterprise plan and is arranged with our team. Talk to sales to get started.
How it works
- 1
Add Orbinly to your identity provider
Orbinly gives you an ACS URL and an Entity ID to enter, with the email address as the name ID and an "email" attribute.
- 2
Tell Orbinly about your provider
Enter your company email domain and your provider's metadata URL.
- 3
Prove you own the domain
Add the DNS TXT record Orbinly shows you. Only after your domain is verified is the connection switched on.
- 4
Sign in
Your team uses Sign in with SSO on the login page.
- Anyone with an email at your verified domain who signs in through SSO joins your workspace as a member. The owner can then change their role.
- SSO is for your team. Client portal sign-in is unchanged.
- Password sign-in still works alongside SSO. Enforcing SSO-only isn't available.
Owners and admins manage SSO under Settings → Security.
Didn't find what you needed?
Our team responds to every message personally.