---
title: SSO and access control
description: Let your team sign in with company login and lock down who can do what.
canonical_url: https://housingstreet.com/help/enterprise/access-control-sso
md_url: https://housingstreet.com/help/enterprise/access-control-sso.md
last_updated: 2026-07-13
status: ga
relatedRoutes: ["/settings/access-control","/settings/security"]
---

## What this is [#what-this-is]

**SSO** (single sign-on) lets people log in with the same account they use at work — like Google Workspace or Microsoft 365.

**Access control** sets rules for who can open which screens and what they can change.

<PlanBadge plans="['ENTERPRISE']" />

<UiPath path="Settings → Advanced Access Control" />

<DocScreenshot src="/help-media/enterprise/access-control.png" alt="Access control settings with SSO provider setup, IP rules, and permission templates" caption="Control who gets in and what they can do" />

## Steps [#steps]

<Steps>
  <Step title="Open access control">
    Go to **Settings → Advanced Access Control**.
  </Step>

  <Step title="Turn on SSO">
    Pick your identity provider (Google, Microsoft, or SAML). Follow the on-screen steps to connect it.
  </Step>

  <Step title="Require two-factor (optional)">
    Turn on **Require 2FA** if you want every person to use a phone code at login.
  </Step>

  <Step title="Set IP rules (optional)">
    Add allowed IP addresses if your team only works from the office network.
  </Step>

  <Step title="Test with one person">
    Ask one teammate to sign out and sign in with SSO. Confirm they land on the dashboard.
  </Step>
</Steps>

## Expected result [#expected-result]

Your team signs in with company credentials. People without permission cannot open locked settings pages.

<RelatedAdminLink href="/settings/access-control" label="Open access control" />