> For the complete documentation index, see [llms.txt](https://learn.doubletick.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://learn.doubletick.io/settings/single-sign-on-sso-in-doubletick.md).

# Single Sign-On (SSO) in DoubleTick

Single Sign-On (SSO) is an Enterprise add-on feature that allows your team to securely access DoubleTick using your organization's existing identity provider instead of logging in with a mobile number and OTP.

DoubleTick currently supports:

* Microsoft Azure Active Directory (Azure AD)
* Google Workspace

Once SSO is configured, your team members can sign in using their company credentials, providing a secure and seamless login experience.

***

#### <mark style="color:$primary;">**What is Single Sign-On (SSO)?**</mark>

Single Sign-On (SSO) enables your employees to log in to DoubleTick using the same work account they use to access other business applications.

Instead of creating separate credentials for DoubleTick, authentication is handled by your organization's identity provider.

This simplifies user management while improving security across your organization.

***

#### <mark style="color:$primary;">**Benefits of Using SSO**</mark>

Enabling SSO helps your organization:

* Simplify user login with existing work credentials
* Improve security through centralized authentication
* Reduce password management for employees
* Onboard new users more efficiently
* Manage user access through your organization's identity provider

***

#### <mark style="color:$primary;">**Before You Begin**</mark>

Before setting up SSO, ensure that:

* Your organization is on the **Enterprise Plan**.
* SSO has been enabled for your organization.
* Your organization uses either **Microsoft Azure Active Directory (Azure AD)** or **Google Workspace** as its identity provider.
* Your IT administrator is available to complete the identity provider configuration.

{% hint style="info" %}
**Note:** DoubleTick currently supports only Microsoft Azure AD and Google Workspace for SSO authentication.
{% endhint %}

***

#### <mark style="color:$primary;">**How SSO Setup Works**</mark>

Setting up SSO requires collaboration between your organization, your DoubleTick Customer Success Manager (CSM), and your IT administrator.

The overall process consists of the following steps.

#### Step 1: Share Your Organization Details

To begin the setup, your Customer Success Manager will collect a few details from your organization, including:

* Organization name
* Identity provider (Microsoft Azure AD or Google Workspace)
* List of users who will access DoubleTick (Name, Login Number and Official Email Address)

This information is used to prepare your organization for SSO configuration.

#### Step 2: DoubleTick Generates Your Configuration Details

Once your information has been received, the DoubleTick team generates the required configuration values, including:

* Entity ID
* ACS (Assertion Consumer Service) URL

These details are shared with your IT administrator.

#### Step 3: Configure Your Identity Provider

Using the Entity ID and ACS URL provided by DoubleTick, your IT administrator must configure your organization's identity provider.

After completing the configuration, your identity provider will generate the following:

* X.509 Certificate
* Entity ID
* SSO URL

These details are required to complete the setup in DoubleTick.

#### Step 4: Complete the SSO Configuration

Once your IT team shares the generated configuration details, your Customer Success Manager will complete the setup in DoubleTick by uploading:

* X.509 Certificate
* Entity ID
* SSO URL

These details are configured from: **Settings → Configure Single Sign-On**

or directly from:

[**https://web.doubletick.io/v1/settings/sso**](https://web.doubletick.io/v1/settings/sso)

After the details are saved, SSO will be enabled for your organization.

#### Step 5: Invite Your Team Members

Once SSO is enabled, your team members can be invited to the organization using their official email addresses.

It is important that the email address used in DoubleTick matches the email configured in your organization's identity provider.

***

#### <mark style="color:$primary;">**Logging In with SSO**</mark>

After SSO has been enabled:

1. Open the DoubleTick login page.
2. Select **Login with SSO**.
3. Authenticate using your organization's login credentials.
4. Once authentication is successful, you'll be redirected to your DoubleTick workspace.

> **Note:** After SSO is enabled, users will no longer be able to log in using the mobile number and OTP method.

***

#### <mark style="color:$primary;">**If Your Organization Has Not Added Team Members Yet**</mark>

If your organization has already been created but no users have been invited yet, the setup process becomes simpler.

In this case:

* Only the user's official email address is required.
* Mobile numbers are not required during onboarding.
* Your organization must still specify whether it uses Microsoft Azure AD or Google Workspace.

The remaining SSO configuration process remains the same.

***

#### <mark style="color:$primary;">**Summary**</mark>

Single Sign-On (SSO) allows your organization to securely access DoubleTick using your existing Microsoft Azure AD or Google Workspace credentials. Once configured, your team can log in using their company accounts, making user access simpler, more secure, and easier to manage.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://learn.doubletick.io/settings/single-sign-on-sso-in-doubletick.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.