---
title: "Single sign-on"
description: "Let your team use their work accounts to sign in to Davner."
canonical_url: "https://davner.com/docs/organization/sso"
type: "doc"
---

Source: https://davner.com/docs/organization/sso

Single sign-on (SSO) lets your team sign in to Davner with their work accounts. Your IT team controls who has access through your identity provider.

When someone you've granted access signs in for the first time, Davner creates their account and adds them to your organization as a **Member**. You don't need to invite each person separately.

## Set up SSO

An organization **admin** or **owner** can configure SSO. Sign in to Davner, open **Organization → Settings**, and select [Set up SSO](https://davner.com/app/organization/sso).

Work with your IT team to connect your identity provider and choose who should have access.

**[Microsoft Entra](https://davner.com/docs/organization/sso/microsoft-entra)**

Set up SSO with Microsoft Entra using the illustrated guide.

**[Other SAML providers](https://davner.com/docs/organization/sso/other-saml-providers)**

Connect Okta, Google Workspace, or another SAML 2.0 identity provider.

## Add your email domains

Enter the email domains your team uses before copying the **Reply URL (ACS URL)** into your identity provider. If you have more than one domain for the same identity provider tenant, separate them with commas.

Save the connection and [contact us](https://davner.com/contact) to verify ownership of your domains. We'll let you know when it's ready, usually within a business day.

Once the connection shows **SSO is active**, people using those domains sign in through your identity provider. Test it with a team member who's been granted access.

## Manage access

Grant and revoke access through your identity provider. If someone needs to manage the organization, an admin or owner can [change their role in Davner](https://davner.com/docs/organization/members#change-a-role) after they join.

When you remove someone's access in your identity provider, also [remove them from your Davner organization](https://davner.com/docs/organization/members#remove-a-member).

## Turn off SSO

To turn off a connection, open it in **Single sign-on** and select **Disable SSO**. People at its domains go back to signing in with an emailed code unless another connection covers their domain.