Single sign-on (SSO) lets your staff sign in with their company account, Microsoft 365 (Entra ID) or Google Workspace, instead of a separate password and one-time password. Your company’s own MFA and joiner/leaver process then apply.
Status: single sign-on is shown as On roadmap on Settings → Plan & usage. Ask your account manager whether it can be switched on for your organisation.
How it works
- The support team links your company’s email domain (for example the domain of your staff addresses) to your organisation, pinned to your company’s Microsoft or Google directory. You do not configure anything in EmitLedger yourself.
- The sign-in page asks for the email address first. People with an address in your domain and no EmitLedger password are sent to your company sign-in.
- A company account never gives access on its own: each person still needs an invitation from a client admin on Settings → Members. Invitations work as before, but no password email is sent to people in an SSO domain; the invitation form says so.
- People signing in with SSO are not asked for the EmitLedger one-time password: your company’s MFA applies instead.
- People outside your domain, for example external verifiers or consultants, keep signing in with a password and a one-time password.
What we need from your IT
| Microsoft 365 | Google Workspace |
|---|---|
| The email domain or domains your staff use | The email domain or domains |
| The Directory (tenant) ID from the Entra admin center | The Workspace primary domain |
| Whether users need admin consent for new apps; if so, an administrator grants consent once, at the first sign-in | — |
Before a domain is linked, the support team asks for a written confirmation from your IT or an executive, sent from an address in that domain. A domain can belong to one organisation only, and personal mailbox domains cannot be linked.
Leavers
When someone leaves, disable their company account as usual; they can then no longer sign in. Also remove them on Settings → Members, so the membership ends in EmitLedger too. See Members.