Guide to single sign-on settings

If your workspace has single sign-on (SSO) turned on, there are a few additional settings that make it easier to bring member details stored in your identity provider — like display names and email addresses — into Slack.

💡 Learn more about SAML single sign-on or G Suite single sign-on

 

Access SSO settings

Standard and Plus plans 

Enterprise Grid plan

Workspace Owners can access SSO settings. Here's how:

  1. From your desktop, click your workspace name in the top left.
  2. Select Workspace Settings from the menu to open your workspace site.
  3. Click the Authentication tab, then press Configure. If you already have SSO turned on, press Change Settings. You may be asked to authenticate.
  4. Click Expand.

Org Owners and Admins access SSO settings. Here's how:

  1. From your desktop, sign in to your Slack Enterprise Grid, then click Manage Organization.
  2. Visit the  Security page of the Admin Dashboard.
  3. Click SSO Preferences.


Learn about SSO settings

Standard and Plus plans 

Enterprise Grid plan

👤  Update a profile each time a user logs in

Attributes for full name, email address, and display name will automatically sync and update members profiles when they sign in to Slack.

📧  Allow users to change their email address

Give members the option of changing their email address to something other than the whitelisted domain that they used to create their account.

🏷  Allow users to change their display name

Display names for each member come from your identity provider, but you can give members the option of choosing a different display name.

💼  Choose who must use single sign-on

You can choose who is required to use single sign-on to access your workspace: all members, all members except guest accounts, or make it optional. Here are some things to keep in mind:

  • The option to require All members except guest accounts to use single sign-on is the most common preference.
  • Binding emails are not sent to members if single sign-on is optional.

🎨  Customize sign in button label

If you have a nickname for your SAML-based SSO system, you can customize the button label to help your members sign in.

 

👤  Update a profile each time a user logs in

Attributes for full name, email address, and display name will automatically sync and update members profiles when they sign in to Slack.

📧  Allow users to change their email address

Give members the option of changing their email address to something other than the one connected to your identity provider.

🏷  Allow users to change their display name

Display names for each member come from your identity provider, but you can give members the option of choosing a different display name.

💼  Choose who must use single sign-on

You can choose who is required to use single sign-on to access your workspace: all members or all members except guest accounts.

The option to require All members except guest accounts to use single sign-on is the most common preference.

🎨  Customize sign in button label

If you have a nickname for your SAML-based SSO system, you can customize the button label to help your members sign in.

 

Additional security preferences

There are a number of preferences that you can set with or without single sign-on turned on. 🔓

Here’s where you can learn more about them:

Who can use this feature?
  • Workspace Owners and Org Owners/Admins can access this feature. 
  • Available on the StandardPlus, and Enterprise Grid plans.

Related Articles

Recently Viewed Articles