Skip to main content

Single Sign-On (SSO)

Learn how to sign in to Compass using your organization's Single Sign-On (SSO) provider.

Overview​

Single Sign-On (SSO) allows you to sign in to Compass using your corporate credentials. Instead of entering a separate Compass password, you authenticate through your organization's identity provider (like Microsoft Azure AD, Okta, or Google Workspace).

How SSO Works​

When SSO is enabled for your organization:

  1. Click SSO button on the Compass sign-in page
  2. Redirect to provider - You're taken to your organization's SSO login page
  3. Sign in with your corporate credentials
  4. Automatic redirect - You're automatically signed in to Compass

Signing In with SSO​

Step 1: Access Sign-In Page​

  1. Navigate to your Compass URL
  2. You'll see the Sign In page

Step 2: Click SSO Button​

  1. Click the SSO (sign in via corporate) button
  2. You'll be redirected to your organization's SSO provider

Step 3: Authenticate​

  1. Enter your corporate email and password
  2. Complete any additional authentication steps required by your organization (2FA, security questions, etc.)
  3. You'll be automatically redirected back to Compass

Step 4: Access Compass​

  • Once authenticated, you're automatically signed in to Compass
  • No need to enter Compass credentials separately

SSO Requirements​

SSO must be configured by your Compass administrator. To use SSO:

  • Your organization must have SSO enabled in Compass
  • Your email domain must match the configured SSO domain
  • You must have an active account in your organization's identity provider

SSO vs Password Authentication​

FeatureSSOPassword Authentication
CredentialsCorporate email/passwordCompass email/password
SetupConfigured by adminSet by user
SecurityManaged by organizationManaged by user
ConvenienceOne login for all appsSeparate password needed

Security Settings​

Your administrator can configure SSO enforcement:

SettingDescription
Enforce SSO LoginSSO is required - password login disabled
SSO OptionalUsers can choose SSO or password login
SSO DisabledOnly password authentication available

Note: If "Enforce SSO Login" is enabled, you must use SSO and cannot sign in with a password.