Available on Plus and Premium plans. Only the Workspace Owner can enable SSO (single sign-on).
We recommend that you first enable SCIM and only then SAML.
Single Sign-On (SSO) allows your team to securely access WebWork and other connected apps using just one login. This simplifies account management, strengthens security, and saves time for your entire organization.
What SSO Options Does WebWork Support?
WebWork supports the following SSO providers:
- Okta
- Microsoft
- Custom SAML
All options let your users authenticate through your organization's Identity Provider (IdP), eliminating the need to manage separate WebWork credentials.
How to Enable or Disable SSO in WebWork
To access and update your SSO settings:
- Log in to your WebWork account.
- Navigate to Settings.
- Click Single Sign-On (SSO) from the left-hand menu.
- Choose one of the following:
- Don’t require SSO – if you don’t want to enforce SSO login.
- Okta, Microsoft, or Custom SAML – to enable secure login for your team.
What is SCIM?
SCIM (System for Cross-domain Identity Management) is a protocol that automates user provisioning between your Identity Provider and WebWork. With SCIM, you can:
- Automatically create, update, or deactivate users from your IdP.
- Manage all user changes (name, role, access) in one central place.
- Eliminate the need for manual user management in WebWork.
What is SAML?
SAML (Security Assertion Markup Language) is a secure protocol used to exchange authentication data between two systems:
- Identity Provider (IdP) – such as Okta or Microsoft Entra ID
- Service Provider (SP) – in this case, WebWork
When a user signs in through the IdP, the IdP sends a trusted authentication "assertion" to WebWork, granting access without requiring a separate login.
Learn More
Okta SSO Setup Guide
Microsoft SSO Setup
Custom SAML SSO Setup Guide