Skip to main content
Single sign-on (SSO) is available for Enterprise organizations. Connect your identity provider, such as Okta, Microsoft Entra ID, or Google Workspace, so members can use their company accounts to sign in to Abliteration. SAML and OpenID Connect (OIDC) are supported.

​
Prerequisites

You need:
  • An Enterprise organization. To enable SSO for your organization, contact help@abliteration.ai.
  • The Owner or Admin role in that Abliteration organization.
  • Access to your company’s DNS settings, or help from an IT administrator who manages them.
  • Administrator access to your identity provider.
Once setup is complete, users on your company domain must sign in with SSO, including when accessing a Personal organization with their company email. Tell members about the change and assign them to your identity-provider application before completing setup. Existing sessions will require a new SSO sign-in.

​
Set up SSO

​
1. Open Security settings

Sign in to Console as an organization Owner or Admin. Select your company organization and open Settings → Security. Find the Single sign-on section. If you see Contact sales or Contact support, select it to request access to SSO setup.

​
2. Verify your company domain

Select Verify company domain and follow the setup wizard’s instructions to add a verification record with your DNS provider.

​
3. Configure your identity provider

After verification, return to Settings → Security and select Set up SSO. To resume an unfinished setup, select Continue setup. Choose your identity provider and follow the instructions in the wizard:
  1. Create an application in your identity provider using the configuration values shown in the wizard.
  2. Assign the users who need access, including the Owner or Admin completing setup.
  3. Complete the provider configuration in the wizard. Use each person’s existing Abliteration email address to preserve access to their account.
For additional provider details, see the identity provider guides. Always use the configuration values from your Abliteration setup wizard.
Google Workspace SSO requires this setup. Selecting Continue with Google on the sign-in page does not enable company SSO.

​
4. Test sign-in

Select Test sign-in in the wizard. Sign in as an assigned user and complete any verification required by your identity provider.
Abliteration setup portal showing an activated SAML connection, its verified example domain, IT contact, and Test sign-in button

An example SAML connection after setup.

Return to Settings → Security and confirm that Sign-in policy reads Company SSO required. Select Refresh status if the page has not updated. You may be prompted to sign in again through SSO.

​
View or manage your configuration

Organization Owners and Admins can open Settings → Security → Manage SSO to review the connection, update its configuration, or manage IT contacts. Security settings show your company domains, sign-in policy, and default role for new employees. Your identity provider manages two-factor authentication for company SSO.
Example Enterprise Security settings showing Manage SSO, Company SSO required, the Member role for new employees, and two-factor authentication managed by the identity provider

Security settings after SSO activation, with Connection details expanded.

​
Sign in with SSO

  1. Open the sign-in page.
  2. Enter your work email and select Continue. You can also select Sign in with SSO and enter your work email there.
  3. Authenticate with your company’s identity provider and complete its verification steps.
Use the email address associated with your existing Abliteration account. You do not need to create another account. If you were invited with an email outside the company’s domains, open your invitation and follow the organization’s SSO prompts.

​
Sign-in and access

  • Once your domain is verified and the connection is active, company SSO is required. There is no separate enforcement toggle.
  • Existing members keep their accounts, organization roles, and project access. Enabling SSO does not transfer Personal projects to your organization.
  • New employees on a verified company domain can join by signing in with SSO. They receive the Member role; an Owner or Admin assigns project access separately.
  • External guests need an Abliteration invitation and access to your company’s identity-provider application.
Manage roles and project access in Members. SSO does not synchronize identity-provider groups or roles. To remove someone’s organization access, remove them from Members as well as your identity-provider application.

​
Multiple domains

Contact help@abliteration.ai to add company domains to your SSO setup. Verify each domain separately and configure the corresponding users in your identity provider.

​
Troubleshooting

​
No SSO configured for this domain

Check your email address and ask an organization Owner or Admin to confirm that your domain is verified and SSO setup is complete. Contact help@abliteration.ai if you need SSO enabled.

​
Domain verification is still pending

Check the TXT record name and value against the wizard’s instructions. Some DNS providers append your domain to the record name automatically; avoid entering it twice. Allow time for DNS changes to propagate, then check again.

​
User is not assigned to the application

Ask your IT administrator to assign you to the Abliteration application in your identity provider. Confirm that the application sends the same email address as your Abliteration account.

​
You can sign in but cannot open a project

New employees join as Members without automatic project access. Ask an organization Owner or Admin to grant access in Members.

​
Company sign-in is unavailable

Ask your IT administrator to check the connection and, for SAML, whether its certificate has expired. If no Owner or Admin can sign in, contact help@abliteration.ai. Company SSO remains required while the issue is resolved.
Last modified on October 27, 2026