Require single sign-on for your email domain

Requiring single sign-onSingle sign-on (SSO) Signing in through your firm's own company login instead of a sign-in code, set up for your email domain on the Enterprise plan. makes your company login the only way in for every address on your email domain, except the people you exclude. Set up your company login and test it first.

1. 1

   Open the domain's Edit page

   In Domains, on the Active tab, open the domain's Action menu and choose Edit.

2. 2

   Require single sign-on

   Set the option for requiring single sign-on so that it's required.

3. 3

   Exclude who keeps codes

   Under Exclude Emails From SSO, type the addresses that should keep signing in with a sign-in codeSign-in code A 6-digit code sent to your email or phone each time you sign in, so no password is needed; it expires after 10 minutes., separated by commas, such as alex.rivera@smithlaw.com, jane.sample@smithlaw.com. Only the part before the @ is kept.

   Exclude at least the person who added the domain, since only they can change it. If your company login fails, they can still sign in with a code and turn the requirement off.

4. 4

   Save it

   Choose Submit. The requirement applies while the domain's Sso switch is on.

What happens next

• On any sign-in page, including your firm's portal and Admin Panel addresses, someone who types an address on the domain and chooses Continue with email is sent to your company login. The page may show "SSO authentication is required for this domain." for a moment first. Afterwards they're back where they started, signed in; from the main sign-in page, they land on the Hubs page. There's no separate button.
• Excluded people apart, the company login is the only way in: a code by email or text, Continue with Google and the link in an invitation email all lead to it instead. New colleagues can't get a sign-up code; their first sign-in through the company login creates their account.
• It covers every address on the domain in every hubHub Your law firm's own client portal, with its branding, its team and all of its cases in one place., not only yours. A colleague who is also a client of another firm signs in there through your company login too.
• People already signed in stay signed in until they sign out or 30 days pass. To cut off someone who has left, turn them off in your company login and disable them in Users.
• Turning the domain's Sso switch off, or Reset, lets everyone use codes again. The requirement returns when single sign-on is switched back on.
• Single sign-on works only while the domain's hub is on the Enterprise plan. If the hub moves to another plan, its people get codes again, single sign-on is refused with "Single sign-on is only available on the Enterprise plan. Sign in with a code instead.", and the domain's settings are kept for a move back. Codes also work again while CaseActive support has switched single sign-on off for your domain.

If something goes wrong

Your company login fails and nobody can sign in. The excluded person who added the domain signs in with a code and turns its Sso switch off. Everyone can then use codes until the company login works again.