Single sign-on (SSO) via Microsoft lets you sign up and/or log in with your Microsoft 365 / Entra account to save you time and provide peace of mind.

Using Active Directory Federation Services Single Sign On (ADFS SSO)? You'll need to use our Custom SAML option instead.

What you'll need

• Microsoft SSO is available on the Enterprise Plan only.
• Workspace owners and admins can set up SSO.

• If you need support for multiple Active Directory tenants, you'll need to use custom SAML.

Log in with SSO

To log in with Microsoft SSO, you will first need to have your Microsoft account linked to your ClickUp account.

• If SSO is required in your ClickUp Workspace settings, all users must log in with SSO, and their accounts will be linked. Learn more about the options available when activating SSO for your entire Workspace. 

• ClickUp users can manually link their ClickUp and SSO accounts in the following way:
  1. In the upper-right corner, click your personal avatar.
  2. Select Settings.
  3. On the My Settings page, scroll down to the Single Sign On section.
  4. Click Link.

Add ClickUp to your Entra account

To add ClickUp to your Entra account for the first time:

1. Log in to your organization's Entra directory.
2. In the left sidebar, click Enterprise applications.
3. In the upper-left, select New application.
4. Search and find the ClickUp application.
5. Click Create.

Set up the integration for your Workspace

Once you have added ClickUp to your Entra account, you can finish setting up the integration. You must be an owner or admin in your ClickUp Workspace to complete the following steps:

1. In Entra, click Users and groups in the left sidebar. 
2. In the upper-left, click Add user/group. Add yourself as a user.
3. In the left sidebar, click Single sign-on.
4. Select SAML.
5. You should be taken to this screen.
   
6. In ClickUp, in the upper-left corner, click your Workspace avatar and select Settings.
7. In the All settings sidebar, select Security & Permissions.
8. In the Single sign-on (SSO) section, select Microsoft.
9. Copy the Identifier (Entity ID) and the Sign on URL from ClickUp and paste them into the matching fields in Entra.
10. Copy the App Federation Metadata URL data from Entra and paste it into the Entra Federation Metadata URL field inside of ClickUp.
    

    The metadata URL field does not display if the integration has already been set up by someone else.

11. Click Save metadata.
12. Click Authenticate with Entra.
13. You'll be redirected to sign in to Entra.
14. After signing in, you'll be redirected to ClickUp Workspace Settings where you can manage your SSO preferences.

Customize security settings

Workspace admins can control whether Microsoft auth is required.

If Microsoft auth is enforced, current Workspace members will be prompted to link their Microsoft account to ClickUp. If they're already logged into a Workspace requiring SSO, they'll be prompted three times to set it up before being forced to do so. At any time, you can check which people in your Workspace have linked their Microsoft account. 

When logging in, people will be forced to sign in with their Microsoft account in order to access your Workspace. 

Require SSO

Workspace owners and admins can choose to require SSO when users log into their ClickUp accounts. Once enabled, users will be prompted to link their IDP account with on-screen instructions.

The next time users log in, or when newly invited users accept an invitation to join your Workspace, they will see a login screen.

If a recently invited user is creating a new ClickUp account, they will need to set a password for their ClickUp account before accepting the Workspace invitation and setting up Microsoft SSO.

This is a requirement even if you enforce SSO in your Workspace, as the user may create, or be invited to, other Workspaces that do not enforce Microsoft SSO. Once the user completes the sign-in, their ClickUp account will be linked with their user account from your IDP.

Ensure everyone has been added to Entra before inviting them to ClickUp.  

Login Policy options

• All users must use Microsoft auth: All member-type and guest-type users must use Microsoft auth.
• All users except guests must use Microsoft auth: Guest-type users aren't required to use Microsoft auth. 
• Using Microsoft auth is optional: Use of Microsoft auth is optional for all users. 
  • When SSO authorization is optional, each user in your Workspace needs to manually link SSO in their account settings.

Check who in your Workspace is using SSO

Admins can see who in the Workspace has linked their Microsoft account to ClickUp: 

1. In the upper-left corner, click your Workspace avatar and select People or Manage users.
2. On the Manage people page, users with a Microsoft icon next to their names have set up SSO.

Remove Microsoft from your account

To manage your linked accounts, go to your profile settings and scroll to the bottom. You will see a list of the SSO accounts you have associated with your ClickUp account. From here, you can unlink your account to remove it.