Single sign-on
Let your team use their work accounts to sign in to Davner.
Single sign-on (SSO) lets your team sign in to Davner with their work accounts. Your IT team controls who has access through your identity provider.
When someone you’ve granted access signs in for the first time, Davner creates their account and adds them to your organization as a Member. You don’t need to invite each person separately.
Set up SSO
An organization admin or owner can configure SSO. Sign in to Davner, open Organization → Settings, and select Set up SSO.
Work with your IT team to connect your identity provider and choose who should have access.
Microsoft Entra
Set up SSO with Microsoft Entra using the illustrated guide.
Other SAML providers
Connect Okta, Google Workspace, or another SAML 2.0 identity provider.
Add your email domains
Enter the email domains your team uses before copying the Reply URL (ACS URL) into your identity provider. If you have more than one domain for the same identity provider tenant, separate them with commas.
Save the connection and contact us to verify ownership of your domains. We’ll let you know when it’s ready, usually within a business day.
Once the connection shows SSO is active, people using those domains sign in through your identity provider. Test it with a team member who’s been granted access.
Manage access
Grant and revoke access through your identity provider. If someone needs to manage the organization, an admin or owner can change their role in Davner after they join.
When you remove someone’s access in your identity provider, also remove them from your Davner organization.
Turn off SSO
To turn off a connection, open it in Single sign-on and select Disable SSO. People at its domains go back to signing in with an emailed code unless another connection covers their domain.