Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 13 additions & 1 deletion data/docs/manage/administrator-guide/sso/overview.mdx
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
date: 2026-02-26
date: 2026-04-08
id: sso-overview

title: Single Sign on (SSO) - Overview
Expand Down Expand Up @@ -40,6 +40,18 @@ If your provider supports IdP-initiated logins, you will see an option to set th

- Copy the `IdP Initiated SSO URL` from the `Authenticated Domains` section and set this as the `Relay State URL` in your IdP

## Switching SSO providers

Each domain can only have one SSO configuration at a time. To switch providers (for example, from Google to Okta), you must delete the existing SSO configuration before adding a new one.

Before deleting the existing configuration:

1. Generate password credentials for at least one admin account: go to `Settings → Workspace Settings → Members`, select the account, and click **Generate Reset Password Token**.
Comment thread
revmag marked this conversation as resolved.
2. Verify you can log in with password credentials by navigating to `<your-instance-url>/login?password=Y`.
3. Delete the existing SSO configuration and set up the new provider.
Comment thread
revmag marked this conversation as resolved.

Other users without password credentials will be unable to log in during the migration window. Plan the switch during off-working hours to minimize disruption.

## Next steps

Looking for step-by-step setup? See the user guides below:
Expand Down
Loading