How to require Single Sign-On (SSO) for your organisation

Requiring Single Sign-On (SSO) gives your organisation more control over how users access Flexwhere. When this setting is enabled, users can only sign in through the identity provider selected by an administrator: Microsoft or Google.

What changes when SSO is mandatory?

When you require SSO:

• Users can only sign in with the selected Microsoft or Google account.
• Signing in with an email address and password is no longer available.
• Users cannot create, change, or reset a Flexwhere password.
• New users must be added to the workspace by an administrator before they can sign in.
• Users who are already signed in remain signed in until they need to authenticate again.

This reduces the number of available sign-in methods and helps prevent users from choosing an unsupported personal account.

How to require SSO

1. Sign in to the Flexwhere Control Centre.
2. Go to Settings.
3. Open the Organisation tab.
4. Under Security, find the Sign in section.
5. Enable Require SSO.
6. Select the identity provider your organisation uses:
• Microsoft
• Google
7. Select Save.

The setting will apply to all new sign-ins. Users with an active session will not be signed out immediately.

What will users see?

When users try to sign in, they will only see the SSO option selected by your organisation. If their account has not yet been added to the workspace, they will be asked to contact their administrator.

Before enabling mandatory SSO

Make sure that:

• All users have an account with the selected identity provider.
• Their Flexwhere email addresses match the accounts managed by your organisation.
• All required users have already been added to the Flexwhere workspace.

If you do not see the Require SSO setting or need help configuring it, please contact Flexwhere Support.