About SSO for your team

With single sign-on (SSO), your colleagues select one button on Studio's sign-in page, and there's no separate password to manage. Your IT team sets it up once with OmniLab, and it then applies to everyone in scope.

Why use it

• No separate password for your team to manage or reset.
• Access follows your company identity system. Once someone's company account is disabled, they can't sign in again. An open session ends within 24 hours.
• The same sign-in your team expects from other business tools.

How it's set up

Your IT team registers OmniLab as a trusted application in your company identity provider, such as Microsoft Entra ID or Salesforce. They send a few technical details to your Customer Success Manager, who turns on SSO for your environment.

1. Ask your IT team which provider you use: Microsoft Entra ID, Salesforce Marketing Cloud or another.
2. Ask your IT team to register OmniLab, following Connect your identity provider.
3. Send the details they collect to your Customer Success Manager.
4. Check each colleague has a Studio account in at least one organisation.
5. Have an Admin set each colleague's Authentication Provider to your company provider.
6. Test with two or three colleagues before you move everyone.

Sign-in only works for accounts that already exist. Each account signs in one way only. A colleague still set to email sign-in is refused with Wrong sign-in method, even once their company account signs them in.

When you test, check the sign-in button appears, the provider signs people in, and they land in the right organisation.

Next steps

• What your identity team provides
• Company sign-in (SSO)
• About customer accounts