Setting Up Single Sign-On (SSO)

【Benefits of SSO】

· No separate WorkVell password to manage — employees use existing Google or Microsoft credentials

· Administrators control access centrally: disabling the organization account also blocks WorkVell login

【Supported protocol】

WorkVell supports OIDC (OpenID Connect).

SAML 2.0 and SCIM-based automatic user provisioning are not supported.

【Supported identity providers (IdP)】

· Google Workspace

· Microsoft 365 (Microsoft Entra ID)

· Okta

· Any other OIDC-compliant IdP

【How to set it up】

SSO is configured by the WorkVell operations team. There is no SSO settings menu in the admin console.

1. 1.Contact support and let us know you would like to use SSO
2. 2.Tell us which IdP you use, along with:

　· The discovery URL (or the issuer URL and individual endpoints)

　· Client ID

　· Client secret

　· The email domains allowed to sign in

3. 3.We will provide the redirect URI (callback URL) — register it on the application in your IdP
4. 4.Once configured, an SSO button appears on the login page (its label can be set per company)

【Logging in once SSO is enabled】

Click the SSO button on the login page, authenticate with your IdP, and you are returned to WorkVell logged in (see #GEN-023).

【Forgot your password】

When signing in with SSO, reset your password with your identity provider.

【Also worth considering】

· Two-factor authentication (TOTP): enable it under Settings → Security (see #GEN-046)

· Passkeys: register one under Settings → Security for passwordless login with face, fingerprint, or PIN