Setting up single sign-on

Single sign-on lets your staff use your existing company sign-in. You need the Configure SSO permission and access to your DNS and your identity provider.

The order

1. Verify your email domain first. Nothing routes to single sign-on until a domain is verified. Operify gives you a TXT record to publish; the apex or _operify.<your domain> both work, and one match is enough.
2. Connect your provider. Google Workspace, Microsoft Entra and any standard OIDC or SAML provider are supported.
3. Test with one account before you switch everyone over.

Worth knowing

A domain belongs to exactly one customer across Operify. If yours is already claimed, contact us. Keep at least one administrator who can sign in with a password, so a problem at your identity provider cannot lock everybody out.

We have step-by-step guides per provider; ask us and we will send the one you need.