Sign-in and directory

SAML single sign-on

Your team’s identity provider signs people in at your verified domain.

Connect in settings

What it does

A team verifies its domain with a DNS record, then connects its SAML 2.0 identity provider in the admin console. Sign-ins at that domain go to the provider; signed assertions, audience, recipient and replay are checked. Owners can enforce SSO, which also refuses API tokens and apps made without it.

Connect SAML single sign-on

  1. Step 1

    In your team’s admin console → Single sign-on, verify your domain with the TXT record shown.

  2. Step 2

    Paste your identity provider’s metadata, test a sign-in, then enforce SSO if you want.

In Freero, Apps & agents → SAML single sign-on takes you straight to this step.

More sign-in and directory

All integrations

Bring your team and your agents to one board

Free to use, open source, and yours to host. No credit card, no seat count.