Single sign-on (SSO) via Microsoft lets you sign up and/or log in with your Microsoft 365 / Azure account to save you time and provide peace of mind.

Using Active Directory Federation Services Single Sign On (ADFS SSO)? You'll need to use our Custom SAML option instead.

What you'll need

• Microsoft SSO is available on the Enterprise Plan only.
• Workspace owners and admins can set up SSO.

• If you need support for multiple active directory tenants, you'll need to use custom SAML.

Log in with SSO

To log in with Microsoft SSO, you will first need to have your Microsoft account linked to your ClickUp account.

• If SSO is required, all of your existing Workspace members will need to login with SSO and their accounts will be linked.

• Existing users can manually link their ClickUp & SSO accounts by clicking their account avatar and selecting My Settings.

Add ClickUp to your Azure account

To add ClickUp to your Azure account for the first time:

1. Log in to your organization's Azure directory.
2. In the left sidebar, click Enterprise applications.
3. In the upper-left, select New application.
4. Search and find the ClickUp application.
5. Click Create.

Set up the integration for your Workspace

Once you have added ClickUp to your Azure account, you can finish setting up the integration. You must be an owner or admin in your ClickUp Workspace to complete the following steps:

1. In Azure, click Users and groups in the left sidebar. 
2. In the upper-left, click Add user/group. Add yourself as a user.
3. In the left sidebar, click Single sign-on.
4. Select SAML.
5. You should be taken to this screen.
   
6. In ClickUp, click your avatar in the upper-right corner.
7. Click Settings.
8. In the sidebar, select Security & Permissions.
9. In the Single sign-on section, select Microsoft.
10. Copy the Identifier (Entity ID) and the Sign on URL from ClickUp and paste them into the matching fields in Azure.
11. Copy the App Federation Metadata URL data from Azure and paste it into the Azure Federation Metadata URL field inside of ClickUp.
    

    The metadata URL field does not display if the integration has already been set up by someone else.

12. Click Save metadata.
13. Click Authenticate with Azure.
14. You'll be redirected to sign in to Azure.
15. After signing in, you'll be redirected to ClickUp Workspace Settings where you can manage your SSO preferences.

Customize security settings

Workspace admins can control if Microsoft auth is required.

If Microsoft auth is enforced, current Workspace members will be prompted to link their Microsoft account to ClickUp. If they're already logged into a Workspace requiring SSO, they'll be prompted three times to set it up before being forced to do so. At any time, you can check which people in your Workspace have linked their Microsoft account. 

When logging in, people will be forced to sign in with their Microsoft account in order to access your Workspace. 

Require SSO

Workspace owners and admins can choose to require SSO when users log into their ClickUp accounts. Once enabled, users will be prompted to link their IDP account with on-screen instructions.

The next time users log in, or when newly invited users accept an invitation to join your Workspace, they will see the following screen:

You can choose to require SSO for all users except guests by selecting All users except guests must use Microsoft auth.

If a recently invited user is creating a new ClickUp account, they will need to set a password for their ClickUp account before accepting the Workspace invitation and setting up Microsoft SSO.

This is a requirement even if you enforce SSO in your Workspace, as the user may create, or be invited to, other Workspaces that do not enforce Microsoft SSO. Once the user completes the sign-in, their ClickUp account will be linked with their user account from your IDP.

Ensure everyone has been added to Azure before inviting them to ClickUp.  

Check who in your Workspace is using SSO

Admins can see who in the Workspace has linked their Microsoft account to ClickUp: 

1. In the upper-left corner, click your Workspace avatar.

2. Select Settings.

3. In the sidebar, click People.

4. People with a Microsoft icon next to their names have set up SSO.

Remove Microsoft from your account

To manage your linked accounts, go to your profile settings and scroll to the bottom. You will see a list of the SSO accounts you have associated with your ClickUp account. From here, you can unlink your account to remove it.