Skip to main content

Set up single sign-on (SSO)

Connect your identity provider (IdP) so Authors sign in with your organization's existing credentials instead of a separate username and password. SSO centralizes access control: when someone joins or leaves your organization, their access to the platform follows automatically from your directory.

Before you begin​

  • Admin access to both this platform and your identity provider (for example, Microsoft Entra ID, Okta, or another SAML/OIDC provider).
  • The connection details exchanged between the two systems — typically a sign-in URL, an entity/issuer ID, and a signing certificate or metadata URL. Your provider setup produces these; see the Developer guide for the exact values.
  • A decision on how Authors are matched — usually by email address — so directory identities line up with platform accounts.
  • Agreement on who can still use a password, so at least one admin retains a fallback login while you test.

Steps​

  1. In your account's security or access settings, open the single sign-on section and choose to add a new connection. (confirm the exact steps in your account)
  2. Select your provider type (SAML or OIDC / Microsoft Entra ID) and paste in the connection details you gathered above.
  3. In your identity provider, register this platform as an application and supply the reply/callback URL shown on the SSO screen.
  4. Map the identity attribute used to match Authors (commonly email) so signed-in users resolve to the right account.
  5. Save the connection, then use any test option to complete a sign-in end to end before enforcing SSO for everyone.
  6. Once verified, enable SSO for your organization and, if desired, require it for all Authors.

Result​

Authors reach the platform, are redirected to your identity provider, sign in with your organization's credentials, and land in their account. Access now follows your directory — deactivating a user there removes their access here.

Canonical terms: Author, Edition, Folder (Project Folder), Broadcast. See the Glossary.