How do I configure SSO?

Who can do this

Owner or Admin

Add an identity provider (Google Workspace, Microsoft Entra / Azure AD, or any OIDC provider) so your users sign in through your own identity system instead of a Console password.

Steps

1. Open Settings in the sidebar and switch to the Security tab.
2. Scroll to Identity Providers and click Add Provider.
3. Choose the type:
   • Google — for Google Workspace.
   • Microsoft / Azure — for Microsoft Entra ID. You'll also need to supply the Azure tenant ID.
   • Custom OIDC — for any other OIDC provider.
4. Fill in Name, Client ID, and Client Secret from your provider's app registration.
5. (Optional) Set Scopes if your provider needs more than openid email profile.
6. Click Add.
7. Use the Test button on the provider row to verify the configuration before letting users in.

Result

The new provider appears in the Identity Providers table. Users whose email matches an auth rule will be sent to that provider at sign-in instead of the password screen.

Related

• How do I route logins by email domain?
• How do I enforce MFA across my organisation?