Identity providers
Guided setup for Okta, Entra ID, and Google Workspace, plus a generic SAML 2.0 path for everyone else. Metadata URL or XML keeps certificates fresh.
Professional add-on
Enterprise sign-in with
Enterprise sign-in with
SAML SSO.
Connect Okta, Microsoft Entra ID, Google Workspace, OneLogin, or any SAML 2.0 provider. Verify your domains, allow or require SSO, create accounts on first sign-in, and optionally provision with SCIM.
Add-on pricing
$5 per SSO user / month
One purchase covers every organization on your billing account. You only pay for people linked to SSO during that cycle. Available on Professional plans.
Domain verify
Prove ownership with a TXT record so only people on your domains can sign in through your identity provider.
Allow or require SSO
Offer Continue with SSO, or lock password and social sign-in for verified domains while owners keep a break-glass path.
JIT & SCIM
Create accounts on first sign-in with a default role, or push users from your IdP with SCIM create, update, and deactivate.
Included social sign-in still works
Google and Microsoft OAuth stay available on every plan. SAML SSO is the add-on for teams that need IdP-enforced access, domain rules, and provisioning.