This article is auto-synced from its in-app version in Tai.
Company admins only. This page is part of Settings, visible to users with the Company Admin role.
Single sign-on (SSO) lets your users sign in to the Workbench with their existing Google account instead of a separate password.
When you'd use this
Use SSO when your company uses Google Workspace and you want users to authenticate with their corporate Google identity. For example: your team already signs in to other tools with @yourcompany.com Google accounts — enabling SSO means they can access the Workbench the same way, without managing a separate password.
Steps
View your SSO configuration
In the Workbench sidebar, click Settings.
Under Access, click App Login.
The Single sign-on (SSO) section shows:
Sign-in provider — the identity provider in use (Google).
Auto-Provision Domains — the email domains that trigger SSO sign-in. These are managed by your Nezasa representative.
Provisioning mode — how first-time sign-ins are handled (see below).
Change the provisioning mode
Open Settings → App Login.
In the Single sign-on (SSO) section, click the provisioning mode you want:
Auto-provision — a user signing in with a matching domain for the first time gets a new account created automatically.
Invite only — a user must already have been invited before they can sign in via SSO.
The change saves immediately.
Tips and limits
Your sign-in domains are configured by Nezasa. Contact your Nezasa representative to add or remove domains.
If SSO is not yet configured for your company, the page shows a message to contact Nezasa.
Users who sign in via SSO do not need a password. You can skip the Send a password-setup invitation option when inviting them.
A user can have both SSO and password sign-in active at the same time.
Related