Single sign-on (SSO)

Single sign-on lets your team sign in to Clakta through your company's identity provider, such as Okta, Microsoft Entra ID or Google Workspace. People use the same company account they use everywhere else, and access is managed from one place.

Before you start

Sign in to Clakta with your work email (for example ana@yourcompany.com). Clakta uses the domain of the email you're signed in with as the domain SSO covers, so personal addresses like Gmail or Outlook can't be used to set it up.

Each email domain can be connected to one Clakta team.

Set up SSO

1. In Clakta, go to Team settings → Security.
2. Under SAML single sign-on, click Configure.
3. Choose your identity provider. The dialog shows the ACS URL and the Entity ID you'll paste into it.
4. Follow the guide for your provider:
   • Okta
   • Microsoft Entra ID
   • Google Workspace
5. Paste the metadata URL (or upload the metadata file) and click Save.

How members sign in

Once SSO is set up, anyone assigned to Clakta in your identity provider can sign in in any of these ways:

• On the login page, click Sign in with SSO and type your team slug (the part after clakta.com/ in your team's address).
• Click the Clakta tile in your identity provider's dashboard.
• If SSO is required, just type your email on the login page and Clakta sends you to your identity provider.

People who sign in through SSO for the first time join the team automatically as members. Owners can change their role later in Members.

Require SSO

In Team settings → Security, turn on Require SSO to make everyone with an email on your domain sign in through your identity provider. Passwords, login codes and Google sign-in stop working for them.

Turning it off, or removing the SSO connection, lets them use the other sign-in methods again.

Common questions