# SAML and SSO

Single Sign-On (SSO) allows a business and its employees to log in to various web applications without the need for multiple usernames and passwords.

Missive supports Single Sign-On (SSO) using any SAML-based identity provider (IdP).

{% hint style="info" %}
Single Sign-On can only be enabled by admins and owners of organizations subscribed to the [**Business plan**](https://missiveapp.com/pricing).
{% endhint %}

<div data-with-frame="true"><figure><img src="https://3242897856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1If7JwIQhfz5wGM9LiIU%2Fuploads%2Fgit-blob-5132498438c9d7ab41cc17dececcb2631bb7b63f%2Ffeatures-ms-azure.png?alt=media" alt="Logging in to Missive with Azure Active Directory enabled" width="450"><figcaption><p>Logging in to Missive with Azure Active Directory enabled</p></figcaption></figure></div>

Here are setup guides for common identity providers:

* [Configuring SSO with Azure Active Directory](https://learn.missiveapp.com/sso/azure-active-directory)
* [Configuring SSO with Okta](https://learn.missiveapp.com/sso/okta)

### How to log in to Missive when SSO is enabled?

There are two different methods to log in to Missive when SSO is enabled.

#### Identity provider dashboard

Browse to your identity provider user page, and there, if Missive is set up correctly, you will find a Missive app icon you can click to log in directly.

<div data-with-frame="true"><figure><img src="https://3242897856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1If7JwIQhfz5wGM9LiIU%2Fuploads%2Fgit-blob-df46a0697d099ea9e41d857bdcf1aa7c07d37931%2Ffeatures-office-365.png?alt=media" alt="Log in from your Office 365 dashboard" width="975"><figcaption><p>Log in from your Office 365 dashboard</p></figcaption></figure></div>

This method only works for the web version of Missive. Use the next method to log in to Missive on your phone or desktop app.

#### Missive SSO login page

1. On the application login page, select **Login with SSO**.

   <div data-with-frame="true"><figure><img src="https://3242897856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1If7JwIQhfz5wGM9LiIU%2Fuploads%2Fgit-blob-0ff082b06523b0e86f80c19023f76877e67779db%2Ffeatures-login.png?alt=media" alt="" width="813"><figcaption></figcaption></figure></div>
2. Enter your organization’s **Login keyword**; if you don’t know it, ask an admin.

   <div data-with-frame="true"><figure><img src="https://3242897856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1If7JwIQhfz5wGM9LiIU%2Fuploads%2Fgit-blob-fa5a70844d3ad6dbb10564d7c1e33b79a45491ce%2Ffeatures-keyword.png?alt=media" alt="" width="813"><figcaption></figcaption></figure></div>
3. In your identity provider authentication window, log in with your username and password, or click your account if you are already logged in.

   <div data-with-frame="true"><figure><img src="https://3242897856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1If7JwIQhfz5wGM9LiIU%2Fuploads%2Fgit-blob-5132498438c9d7ab41cc17dececcb2631bb7b63f%2Ffeatures-ms-azure.png?alt=media" alt="" width="450"><figcaption></figcaption></figure></div>

### Can I enable Single Sign-On just for a few users?

Yes, you can configure SSO for specific users within your organization while allowing others to continue using their username and password for login. This feature is particularly beneficial if certain users need to access multiple organizations. You can do from the SSO tab of your organization settings.

<div data-with-frame="true"><figure><img src="https://3242897856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1If7JwIQhfz5wGM9LiIU%2Fuploads%2Fgit-blob-7082385bce82c2220a730db3665a3177e480095e%2Fguides-sso-exemptions.png?alt=media" alt="" width="767.5"><figcaption></figcaption></figure></div>

### Can I log in to Missive if Single Sign-On was misconfigured?

No, users cannot log in using their previous username and password once Single Sign-on is enabled. It’s essential to test the Single Sign-On setup without logging out of your current session; you should test the login process from a different browser or a private window.
