Guide to single sign-on settings

Owners and Admins of a workspace or organization can enable single sign-on (SSO) as an extra layer of security for their workspace. Depending on your Slack plan, there are a few different ways to configure your SSO setup. 

Note: Learn how to set up SSO with SAML single sign-on and G Suite single sign-on


Access SSO settings

Standard plan

Plus plan

Enterprise Grid plan

  1. From your desktop, click your workspace name in the top left.
  2. Select Administration, then Workspace settings from the menu.
  3. Click the Authentication tab, then Configure. If you already have SSO turned on, press Change Settings. You may be asked to authenticate.
  4. Click Expand.
  1. From your desktop, click your workspace name in the top left.
  2. Select Administration, then Workspace settings from the menu.
  3. Click Authentication, then Configure. If you already have SSO turned on, press Change Settings. You may be asked to authenticate.
  4. Click Expand.
  1. From your desktop, click your workspace name in the top left.
  2. Select Administration, then Organization settings from the menu.
  3. Click Security in the left-side column.
  4. Click SSO Preferences.



Learn about SSO settings

Some SSO settings allow you to bring member details stored in your identity provider (IDP) into Slack.

Standard plan

Plus plan 

Enterprise Grid plan

Update a profile each time a member logs in

  • Email addresses and display names will automatically sync and update when members sign in to Slack.


Allow members to change their email address

  • Instead of restricting email addresses to your whitelisted domain(s), allow members to choose their own email address.


Allow members to change their display name

  • Display names for each member come from your identity provider, but you can give members the option to choose their own.


Choose who must use single sign-on

  • Choose who is required to use single sign-on to access your workspace: all members, all members except guests, or make it optional for everyone. 
  • We recommend using the All members except guest accounts option as this allows guests to sign in using their email address and password.
  • Binding emails are not sent to members if single sign-on is optional.

Update a profile each time a member signs in

  • Full names, email addresses, and display names will automatically sync and update when members sign in to Slack.


Allow members to change their email address

  • Instead of restricting email addresses to your whitelisted domain(s), allow members to choose their own email address.


Allow members to change their display name

  • Display names for each member come from your identity provider, but you can give members the option to choose their own.


Choose who must use single sign-on

  • Choose who is required to use single sign-on to access your workspace: all members, all members except guests, or make it optional for everyone. 
  • We recommend using the All members except guest accounts option as this allows guests to sign in using their email address and password.
  • Binding emails are not sent to members if single sign-on is optional.


Customize the sign in button label

  • You can change the wording on your SSO sign-in button to help members recognize it when signing in.

Update a profile each time a member signs in

  • Full names, email addresses, and display names will automatically sync and update when members sign in to Slack.


Allow members to change their email address

  • Instead of restricting email addresses to your whitelisted domain(s), allow members to choose their own email address.


Allow members to change their display name

  • Display names for each member come from your identity provider, but you can give members the option to choose their own.


Choose who must use single sign-on

  • Choose who is required to use single sign-on to access your workspace: all members or all members except guests.
  • We recommend using the All members except guest accounts option as this allows guests to sign in using their email address and password.


Customize the sign in button label

  • You can change the wording on your SSO sign-in button to help members recognize it when signing in.

Tip:  If you're the owner of a workspace or org, you can skip SSO by clicking the sign-in link. This allows access your workspace even if your IDP is having issues.


Additional security preferences

Whether or not you use SSO, there are other security options you can use to secure your workspace:

Who can use this feature?
  • Only Workspace Owners/Admins and Org Owners/Admins can use this feature.
  • Available on all paid plans.

Related Articles

Recently Viewed Articles