Set up single sign-on (SSO)

Single sign-on is available on the Business and Enterprise plans. Once enabled, members sign in through your identity provider and new employees can join automatically.

Before you start#

• You need the Owner role in Acme Cloud.
• You need admin access to your identity provider.
• Verify your company domain under Settings → Domains.

Connect your identity provider#

Okta#

1. In Okta, add a new SAML 2.0 app named “Acme Cloud”.
2. Paste the ACS URL and Entity ID shown on Acme Cloud’s SSO page.
3. Copy Okta’s metadata URL back into Acme Cloud and click Test connection.

Microsoft Entra ID#

Create an Enterprise application, choose SAML and follow the same steps. Map the email claim to the user principal name.

Enforce SSO#

After a successful test, turn on Require SSO. Members who signed up with a password will be asked to sign in through your provider next time.