SSO and access control

Let your team sign in with company login and lock down who can do what.

What this is

SSO (single sign-on) lets people log in with the same account they use at work — like Google Workspace or Microsoft 365.

Access control sets rules for who can open which screens and what they can change.

Available on:Enterprise

UI path: Settings → Advanced Access Control

Steps

1. Open access control

   Go to Settings → Advanced Access Control.

2. Turn on SSO

   Pick your identity provider (Google, Microsoft, or SAML). Follow the on-screen steps to connect it.

3. Require two-factor (optional)

   Turn on Require 2FA if you want every person to use a phone code at login.

4. Set IP rules (optional)

   Add allowed IP addresses if your team only works from the office network.

5. Test with one person

   Ask one teammate to sign out and sign in with SSO. Confirm they land on the dashboard.

Expected result

Your team signs in with company credentials. People without permission cannot open locked settings pages.

Open access control →