Single Sign-On (SSO) lets your team authenticate with your organization’s identity provider instead of a separate Generate password. Generate supports Okta and Microsoft Entra ID, using either OpenID Connect (OIDC) or SAML 2.0.
SSO is configured in Admin Settings → Access → Single Sign-on and requires administrator privileges.
Single Sign-on list page showing configured identity providers

​
The providers list

The Single Sign-on page lists every identity provider you’ve configured. Each row shows:
ColumnDescription
NameThe display name you gave the provider
ProtocolOIDC, SAML, or Local
Identity providerOkta or Microsoft Entra ID
StatusAn Active / Inactive toggle to enable or disable the provider
Use the search, Sort By, and Filter controls to find a provider, and the row’s ⋯ menu to Edit, open Manage user provisioning, or Delete it.

​
How setup works

1

Add a provider

Click Add provider and, in Step 1 (“Provider”), enter a Display name (for example, Acme-Okta), choose the Identity provider type, and pick the Identity protocol.
2

Enter connection details

In Step 2 (“Connection”), copy the URLs Generate shows you into your identity provider, then paste the provider’s values back into Generate. The exact fields differ by protocol — see the provider-specific guides below.
3

Test the connection

Click Test connection. Generate validates the settings synchronously (no redirect) and shows Connection successful! or Connection failed.
You can’t save a provider until the connection test passes.
4

Enable SSO

Click Enable SSO (or Update when editing). You can turn a provider off at any time with the status toggle or Disable SSO.

​
Next steps

Set up Okta

Configure Okta with OIDC or SAML.

Set up Microsoft Entra ID

Configure Entra ID with OIDC or SAML.

SCIM provisioning

Automatically create, update, and deactivate accounts.

AIM provisioning

Pull users from your identity provider on a schedule.

Group-to-team mapping

Map identity-provider groups to Generate teams.