People and access Last updated

Single sign-on (SSO)

Connect an OpenID Connect provider for your email domain. People then sign in with their work email.

Set it up

The workspace owner opens Settings → Single sign-on and fills in four fields from their identity provider:

  • Issuer URL
  • Email domain (your company’s domain)
  • Client ID
  • Client secret

It works with any OpenID Connect provider, including Google Workspace, Microsoft Entra and Okta. ItemTally uses OpenID Connect; SAML isn’t supported.

Sign in with SSO

People choose Sign in with SSO and enter their work email. Addresses on your domain go to your identity provider to sign in.

Still stuck? Email [email protected] with what you're trying to do. A person who works on ItemTally answers, usually within a business day.