Teams & Collaboration
    Feature Guide

    SSO / SAML Authentication

    Enable Single Sign-On with your identity provider.

    Updated 2026-03-06
    1 min read
    SSO
    SAML
    authentication

    SSO / SAML Authentication#

    Enterprise Plan Feature#

    Enable Single Sign-On so your team can log in with their corporate identity provider (IdP).

    Supported Providers#

  1. Okta
  2. Azure Active Directory (Entra ID)
  3. Google Workspace
  4. OneLogin
  5. Any SAML 2.0 compliant provider

    6. Setup#

  6. Go to Settings → Security → SSO
  7. Click "Configure SSO"
  8. Enter your IdP details:
  9. Entity ID — Your IdP's entity/issuer URL
  10. SSO URL — The single sign-on endpoint
  11. Certificate — Your IdP's X.509 certificate
  12. Copy LemWatch's ACS URL and Entity ID into your IdP
  13. Test the connection
  14. Enable SSO enforcement (optional — require all team members to use SSO)

    15. How It Works#

  15. Team members visit LemWatch and click "Sign in with SSO"
  16. They're redirected to your corporate login page
  17. After authentication, they're automatically logged in to LemWatch
  18. New users are auto-provisioned with the Viewer role (configurable)

    19. SSO Enforcement#

    When enabled, all team members must use SSO — password login is disabled. The organisation owner always retains password access as a fallback.

    SCIM Provisioning (Coming Soon)#

    Automatic user provisioning and de-provisioning via SCIM protocol.

    Was this article helpful?

    Previous

    Activity Log

    Related Articles

    Team Roles & Permissions

    Understand the different access levels for team members.

    Inviting Team Members

    Invite teammates to your LemWatch workspace, assign owner, admin, editor, or viewer roles, and control per-site access.

    Activity Log

    View a complete audit trail of all actions taken in your workspace.

    Incident Handoffs

    Hand off active incidents between team members across shifts.

    Back to Help Center