What is (forced) SSO?
Single Sign-On (SSO) is a convenient way to access multiple applications with just one set of login credentials. At the moment we offer SSO through Google, Slack and Microsoft.
If needed, you can take your security a step further with Forced SSO, which allows you to enforce your company's chosen login method as the only way to access the TruTrip account.
This enhances security by ensuring all employee access is managed through your organisation's identity provider.
How to set up SSO with your TruTrip account
In order for SSO to work, the company account has to be connected with the SSO account. This can be done when the company account is created (the company is created with SSO from the "Create Account"), or by connecting the SSO account later.
Connecting the company SSO account with TruTrip:
To connect an existing account with SSO, you will need a user in TruTrip that has the same email address as the SSO provider.
For example if your company uses Microsoft as an SSO provider, and Natalie's email address is natalie@acme.com:
- Natalie (natalie@acme.com) has to be invited via email first before she can use SSO
- Once natalie@acme.com has been invited, she can simply go to the login page and click on "login with Microsoft" and follow the instructions to verify her Microsoft account. Note that she has to be logged in her Microsoft account on her browser when trying to log in.
- The next time Natalie logs in, she can either use her email + password or the microsoft SSO account.
How to enable forced SSO enhanced security
Forced SSO can only be enabled by the TruTrip team at the moment. If you require forced SSO, please reach out to your account manager or support@trutrip.co.
When forced sso is enabled:
- Existing users can only log in with their SSO account (the email + password will not work).
- New users (invited) can only signup by clicking on the SSO account button
- If the SSO account does not have the same email address as the invited user, the user will not be able to log in.
Frequently Asked Questions
I can't log in with my SSO account
You may have selected the wrong SSO account, or your email address has not been added to the platform yet. Please reach out to your company admin to ensure your account is available.
I can't log in with my email + password any more
If SSO is enabled, and forced in your company account, then you will not be able to log in with your password. You will have to use your SSO account to log in.
I requested a new password but I'm not receiving the email
When Forced SSO is enabled, password requests will not work (as you are only allowed to login with your company SSO account). Try to log in with your SSO account, if it doesn't work It's best to reach out to your company admin to ensure the email used is the same as before.
Who can enable / disable Forced SSO
The company admin will set this up for the entire organization. Forced SSO is only available to users on the standard or premium plans.