Skip to main content
This guide walks you through configuring Single Sign-On for your company on Omnivoo. You will verify your domain, connect your identity provider, and set an authentication policy.
SSO configuration requires the Owner or Admin role on your company account.

​
Getting to the SSO page

Click your avatar at the top of the left sidebar and select Company Settings. On the Company tab, find the Single Sign-On card and click Configure SSO. This opens the Single Sign-On page, which has sections for Domain Verification, SSO Connection, SCIM Provisioning (once a connection exists), and Authentication Policy.
1

Verify Your Domain

Before configuring SSO, you must prove ownership of your company’s email domain.
  1. On the Single Sign-On page, find the Domain Verification section and enter your company domain (e.g., company.com).
  2. Click Add Domain.
  3. Omnivoo will display a DNS TXT record you need to add. It uses the _omnivoo. subdomain prefix, for example:
    • Host / Name: _omnivoo.company.com
    • Value: omnivoo-verify=<token> (a unique token generated for your domain)
  4. Add this TXT record in your DNS provider’s settings (e.g., Cloudflare, GoDaddy, Route 53). Use the exact record shown on the page.
  5. Return to Omnivoo and click Verify.
Each domain you add appears in a list with a status badge: an amber Pending badge until it is verified, and a green Verified badge once verification succeeds. A Remove button next to each domain deletes it after a confirmation prompt.
Omnivoo uses the _omnivoo. subdomain prefix for the TXT record to avoid conflicts with existing TXT records on your root domain (such as SPF or DKIM records).
DNS changes can take up to 48 hours to propagate, though most providers update within a few minutes. If verification fails, wait and try again.
2

Configure Your SSO Connection

After your domain is verified, find the SSO Connection section and click + Configure SSO. This opens a New SSO Connection form.
  1. Optionally enter a Display Name (for example, “Company Okta”) to identify the connection. A connection saved without a display name falls back to <protocol> Connection (for example, “SAML Connection”).
  2. Choose your protocol using the SAML / OIDC toggle pills. SAML is selected by default.
  3. Enter the required fields from your identity provider.

​
SAML Configuration

When configuring the Omnivoo application in your IdP, you will need Omnivoo’s service-provider values (the ACS / callback URL and the audience / Entity ID). Use the exact values Omnivoo provides for your account rather than guessing them, as the host differs by environment.

​
OIDC Configuration

For OIDC, set the redirect URI in your IdP to the callback URL Omnivoo provides for your account.
  1. Click Create Connection to save it.
  2. Use the Activate button on the connection to enable SSO.
Each existing connection appears in a list showing its name, a tag for the protocol (SAML or OIDC), and an Active or Inactive badge. Every connection has an Activate / Deactivate button to switch it on or off, and a Delete button that asks for confirmation before removing it.
3

Set Your Authentication Policy

After activating SSO, choose how your team will log in.In the Authentication Policy section, select one of the following from the Auth Policy dropdown:The policy is saved as soon as you choose it.
Before choosing SSO required, make sure all team members can successfully authenticate through your identity provider. Members without an SSO-enabled email domain will be locked out, so test your SSO connection thoroughly first.
4

Test SSO

Before rolling out to your team, verify that SSO works:
  1. Log out of Omnivoo.
  2. Go to the login page and enter your company email.
  3. Continue with SSO.
  4. Verify that you are redirected to your identity provider’s login page.
  5. Sign in with your company credentials.
  6. Confirm that you are logged in to Omnivoo successfully.
If the test fails, double-check your IdP configuration values (Entry Point URL, Certificate, Client ID, etc.) and ensure Omnivoo’s callback URL is entered correctly in your IdP.

​
IdP-Specific Setup Guides

​
Okta

1

Create the app integration

In Okta, go to Applications > Create App Integration.
2

Select the protocol

Select SAML 2.0 (or OIDC if preferred).
3

Set the ACS URL / Redirect URI

Set the ACS URL / Redirect URI to the Omnivoo callback URL provided for your account.
4

Set the Audience / Entity ID

Set the Audience / Entity ID to the value Omnivoo provides.
5

Copy the values into Omnivoo

Copy the Entry Point URL, Entity ID, and Certificate from Okta into Omnivoo.

​
Azure AD / Entra ID

1

Create a new enterprise application

In the Azure portal, go to Enterprise Applications > New Application.
2

Choose a non-gallery application

Select Create your own application and choose Non-gallery application.
3

Select SAML

Under Single sign-on, select SAML.
4

Set the Reply URL and Identifier

Set the Reply URL (ACS) and Identifier (Entity ID) using the Omnivoo values for your account.
5

Copy the values into Omnivoo

Download the Certificate (Base64) and copy the Login URL into Omnivoo.

​
Google Workspace

1

Add a custom SAML app

In Google Admin, go to Apps > Web and mobile apps > Add custom SAML app.
2

Copy the Google IdP details

Copy the SSO URL and Certificate from the Google IdP information page.
3

Enter Omnivoo's service provider details

Enter Omnivoo’s ACS URL and Entity ID on the service provider details page.
4

Paste the Google values into Omnivoo

Paste the Google values into Omnivoo’s SAML configuration.

​
What’s Next?