1. Single Sign-On (SSO) Overview
What is SSO and which providers does Productive support?
Single Sign-On (SSO) is a secure way to log into Productive using SAML 2.0, which integrates with Google Workspace, Okta, and Microsoft Entra.
What are the benefits of using SSO with Productive?
SSO offers one-click sign-in, allowing employees and contractors to log in without separate credentials. It also enables automated provisioning, letting admins create new Productive accounts directly from the SSO provider.
How do I require employees to log in using SSO?
After setting up SSO in Settings > Single Sign-On, you can enforce SSO login, preventing employees and contractors from using regular email-and-password logins.
What happens if a user is a member of two organizations?
If both organizations have SSO enabled, users must provide the ID of the organization they wish to log in to. This ID can be found in the web address or in the Settings > API integrations section.
2. Logging In Using SSO
How do I log in to Productive using SSO?
Select "Use single sign-on (SSO)" on the login screen. You'll be redirected to your SSO provider to log in with your SSO credentials.
What if I belong to multiple Productive organizations?
After logging in to your SSO provider, you'll need to enter the ID of the organization you want to access. This ID can be found in the URL or in the Settings > API integrations.
Can clients use SSO to log in?
No, SSO is available for employees and contractors only. Clients must log in with their credentials.
What if SSO is enabled but not enforced?
If SSO is enabled but not enforced, you can still log in using your email and password. If SSO is enforced, you must log in through your SSO provider.
I renewed my SSO certificates and can’t log in anymore. What should I do?
You need to disable the current SSO configuration in Productive and then set it up again following the SSO setup instructions. Once completed, SSO login will work as before.
Will enforcing SSO cause problems while updating the configuration?
During the time SSO is disabled and before it is set up again, users won’t be able to log in via SSO.
However, they can still log in using their email and password if SSO enforcement is temporarily disabled. After the new configuration is set, you can enforce SSO again.