Guide to single sign-on settings

Workspace Owners and Org Owners can enable single sign on (SSO) as an extra layer of security. Depending on your Slack subscription, there are a few different ways to configure your SSO setup. 

Note: Learn how to set up SSO with SAML single sign-on and G Suite single sign-on


Access SSO settings

Standard subscription

Plus subscription

Enterprise Grid subscription

  1. From your desktop, click your workspace name in the top left.
  2. Select Administration, then Workspace settings from the menu.
  3. Click the Authentication tab, then Configure. If you already have SSO turned on, press Change settings. You might be asked to authenticate yourself.
  4. Click Expand.
  1. From your desktop, click your workspace name in the top left.
  2. Select Administration, then Workspace settings from the menu.
  3. Click Authentication, then Configure. If you already have SSO turned on, press Change settings. You might be asked to authenticate yourself.
  4. Click Expand.
  1. From your desktop, click your workspace name in the top left.
  2. Select Administration, then Organisation settings from the menu.
  3. Click Security in the left-hand column.
  4. Click SSO preferences.



Learn about SSO settings

Some SSO settings allow you to bring member details stored in your identity provider (IdP) into Slack.

Standard subscription

Plus subscription 

Enterprise Grid subscription

Note: G Suite SSO is the only option for workspaces on the Standard subscription.

Update a profile each time a member logs in

  • Email addresses and display names will automatically sync and update when members sign in to Slack.


Allow members to change their email address

  • Instead of restricting email addresses to your whitelisted domain(s), allow members to choose their own email address.


Allow members to change their display name

  • Display names for each member come from your identity provider, but you can give members the option to choose their own.


Choose who must use single sign-on

  • Choose who is required to use single sign-on to access your workspace: all members, all members except guests or make it optional for everyone. 
  • We recommend using the All members except guest accounts option, as this allows guests to sign in using their email address and password.
  • Binding emails are not sent to members if single sign-on is optional.

Update a profile each time a member signs in

  • Full names, email addresses and display names will automatically sync and update when members sign in to Slack.


Allow members to change their email address

  • Instead of restricting email addresses to your whitelisted domain(s), allow members to choose their own email address.


Allow members to change their display name

  • Display names for each member come from your identity provider, but you can give members the option to choose their own.


Choose who must use single sign-on

  • Choose who is required to use single sign-on to access your workspace: all members, all members except guests or make it optional for everyone. 
  • We recommend using the All members except guest accounts option, as this allows guests to sign in using their email address and password.
  • Binding emails are not sent to members if single sign-on is optional.


Customise the sign-in button label

  • You can change the wording on your SSO sign-in button to help members recognise it when signing in.

Update a profile each time a member signs in

  • Full names, email addresses and display names will automatically sync and update when members sign in to Slack.


Allow members to change their email address

  • Instead of restricting email addresses to your whitelisted domain(s), allow members to choose their own email address.


Allow members to change their display name

  • Display names for each member come from your identity provider, but you can give members the option to choose their own.


Choose who must use single sign-on

  • Choose who is required to use single sign-on to access your workspace: all members or all members except guests.
  • We recommend using the All members except guest accounts option, as this allows guests to sign in using their email address and password.


Customise the sign-in button label

  • You can change the wording on your SSO sign-in button to help members recognise it when signing in.

Tip: Owners of a workspace or org can bypass SSO authentication by using the link at the bottom of the login page. This guarantees access to your workspace, even if your IdP is having issues.


Additional security preferences

Whether or not you use SSO, there are other security options you can use to secure your workspace:

Who can use this feature?
  • Workspace Owners and Org Owners
  • Standard (G Suite SSO), Plus and Enterprise Grid subscriptions

Related articles

Recently viewed articles