Single Sign-On (SSO) in DoubleTick
Single Sign-On (SSO) is an Enterprise add-on feature that allows your team to securely access DoubleTick using your organization's existing identity provider instead of logging in with a mobile number and OTP.
DoubleTick currently supports:
Microsoft Azure Active Directory (Azure AD)
Google Workspace
Once SSO is configured, your team members can sign in using their company credentials, providing a secure and seamless login experience.
What is Single Sign-On (SSO)?
Single Sign-On (SSO) enables your employees to log in to DoubleTick using the same work account they use to access other business applications.
Instead of creating separate credentials for DoubleTick, authentication is handled by your organization's identity provider.
This simplifies user management while improving security across your organization.
Benefits of Using SSO
Enabling SSO helps your organization:
Simplify user login with existing work credentials
Improve security through centralized authentication
Reduce password management for employees
Onboard new users more efficiently
Manage user access through your organization's identity provider
Before You Begin
Before setting up SSO, ensure that:
Your organization is on the Enterprise Plan.
SSO has been enabled for your organization.
Your organization uses either Microsoft Azure Active Directory (Azure AD) or Google Workspace as its identity provider.
Your IT administrator is available to complete the identity provider configuration.
Note: DoubleTick currently supports only Microsoft Azure AD and Google Workspace for SSO authentication.
How SSO Setup Works
Setting up SSO requires collaboration between your organization, your DoubleTick Customer Success Manager (CSM), and your IT administrator.
The overall process consists of the following steps.
Step 1: Share Your Organization Details
To begin the setup, your Customer Success Manager will collect a few details from your organization, including:
Organization name
Identity provider (Microsoft Azure AD or Google Workspace)
List of users who will access DoubleTick (Name, Login Number and Official Email Address)
This information is used to prepare your organization for SSO configuration.
Step 2: DoubleTick Generates Your Configuration Details
Once your information has been received, the DoubleTick team generates the required configuration values, including:
Entity ID
ACS (Assertion Consumer Service) URL
These details are shared with your IT administrator.
Step 3: Configure Your Identity Provider
Using the Entity ID and ACS URL provided by DoubleTick, your IT administrator must configure your organization's identity provider.
After completing the configuration, your identity provider will generate the following:
X.509 Certificate
Entity ID
SSO URL
These details are required to complete the setup in DoubleTick.
Step 4: Complete the SSO Configuration
Once your IT team shares the generated configuration details, your Customer Success Manager will complete the setup in DoubleTick by uploading:
X.509 Certificate
Entity ID
SSO URL
These details are configured from: Settings → Configure Single Sign-On
or directly from:
https://web.doubletick.io/v1/settings/sso
After the details are saved, SSO will be enabled for your organization.
Step 5: Invite Your Team Members
Once SSO is enabled, your team members can be invited to the organization using their official email addresses.
It is important that the email address used in DoubleTick matches the email configured in your organization's identity provider.
Logging In with SSO
After SSO has been enabled:
Open the DoubleTick login page.
Select Login with SSO.
Authenticate using your organization's login credentials.
Once authentication is successful, you'll be redirected to your DoubleTick workspace.
Note: After SSO is enabled, users will no longer be able to log in using the mobile number and OTP method.
If Your Organization Has Not Added Team Members Yet
If your organization has already been created but no users have been invited yet, the setup process becomes simpler.
In this case:
Only the user's official email address is required.
Mobile numbers are not required during onboarding.
Your organization must still specify whether it uses Microsoft Azure AD or Google Workspace.
The remaining SSO configuration process remains the same.
Summary
Single Sign-On (SSO) allows your organization to securely access DoubleTick using your existing Microsoft Azure AD or Google Workspace credentials. Once configured, your team can log in using their company accounts, making user access simpler, more secure, and easier to manage.
Last updated