Search

Intro to single sign-on (SSO)

Use single sign-on (SSO) in your Workspace by integrating with Google, Microsoft, or Okta. You can also connect to another provider using our custom Security Assertion Markup Language (SAML).

What you'll need

  • SSO using Google is available on the Business Plan and above.
  • SSO using Microsoft, Okta, and SAML is available on our Enterprise Plan.
  • A Workspace owner or admin must enable SSO for your Workspace.

Activate SSO 

You must be a Workspace owner or admin to activate single sign-on for a Workspace. 

To activate SSO for your Workspace:

  1. In the upper-left corner, click your Workspace avatar and select Settings.
  2. In the All settings sidebar, click Security & Permissions.
  3. In the Single sign-on (SSO) section, choose your SSO provider. By default, Don't require SSO is selected. 
    • For each provider, you'll have the option to require SSO or make it optional. If SSO is optional, individual users can link or unlink the provider in their account settings. 
      Image of the SSO provider options
  4. Take a look at the following articles for the next steps:

Bypass SSO for individual users

Owners can configure bypass SSO for individual users. 

Troubleshoot SSO

If you’re having trouble logging in with SSO, try relinking your ClickUp account to your SSO provider:

  1. In the upper-right corner, click your personal avatar.
  2. Select Settings.
  3. Scroll down to the Single Sign On section.
  4. To the right of your SSO provider, click Re-link.

Screenshot highlighting the re-link button.png

SAML

Security Assertion Markup Language (SAML) is a standard of communication between Identity Providers (IDP) and Service Providers (SP) like ClickUp.

Configure custom SAML single sign-on

On the Enterprise Plan, you can create a custom single sign-on with any IDP that supports SAML 2.0.

Configure on-premise Microsoft Active Directory with Active Directory Federation Service and SAML SSO

To allow users to sign in through a self-hosted Microsoft account, configure single sign-on (SSO) via Active Directory Federation Services (AD FS).  

SCIM

The System for Cross-domain Identity Management (SCIM) is designed to manage user identity info.

ClickUp does not support user or group imports from ClickUp to Okta.

Okta SCIM ClickUp configuration guide

Workspaces that use Okta for provisioning can use custom roles to fully integrate with Okta.

Microsoft Entra ID SCIM configuration guide

Microsoft Entra ID, previously named Azure, is a custom SAML application with limited automatic provisioning, including user creation and removal.