Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →
CLEATUS
Get CLEATUS
NewIntegrations

Let your team sign in with Okta, Entra ID, or Google 🔐

MittShared by Mitt •

Connect your identity provider to CLEATUS so your team signs in with the work account they already use, and your IT team controls who gets in.

Let your team sign in with Okta, Entra ID, or Google 🔐

Hello everyone! 👋 We've added SAML single sign-on for each company in CLEATUS. Connect Microsoft Entra ID, Okta, Google Workspace, or any SAML 2.0 identity provider, and your teammates sign in with the work account they already use.

What's New

SAML single sign-on is now in Settings for every company on DATA + AI + Automations or higher. Each company in your organization sets up its own connection, so each one can use its own identity provider.

How It Works

Set up single sign-on

  • Open Settings → Single Sign-On. A guided checklist walks you through four steps
  • Add CLEATUS to your identity provider: copy two values, or download a metadata file that Microsoft Entra ID imports in one click
  • Connect your identity provider: upload its metadata XML, or enter the sign-in URL, entity ID, and certificate by hand
  • Verify your email domain with one DNS TXT record
  • Optional: turn on Require single sign-on, so people on your domain sign in only through your identity provider

Sign in with SSO

  • Teammates enter their work email on the sign-in page and click Continue with SSO
  • They can also open CLEATUS from the app tile in their Okta or Entra dashboard
  • The first time a person signs in, CLEATUS adds them to the company with the role you choose (Member, Restricted Member, or Admin)

Why It Matters

Your IT team controls who gets in, from the tools they already use. New teammates join the company automatically on their first sign-in, and each one takes a seat just like an invitation, so you never have to send invites by hand. Turn on Require single sign-on, and passwords, email codes, Google, and passkeys stop working for your domain, so every sign-in goes through your identity provider. 🔐

Get Started

The organization Owner, or an Admin of the company, can set it up in Settings → Single Sign-On. For the step-by-step guide, see Single Sign-On (SAML) in the Help Center.

Happy signing in! 🔐