SSO (Single Sign-On) — Glossary

One corporate login, issued by your identity provider, that grants access to many applications — people sign in once and IT controls access centrally.

What is SSO?

Single sign-on delegates authentication to an identity provider (IdP) such as Microsoft Entra ID, Google Workspace or Okta. An application trusts the IdP — usually over SAML or OpenID Connect — instead of keeping its own passwords, so employees log in once, multi-factor rules apply everywhere, and disabling a person at the IdP closes every door at once. It is the baseline control most security policies require before a SaaS tool holds company data.

Which Claude plans support SSO?

SSO is available on the Claude Team plan, Claude Enterprise and Claude Console organizations (the developer side), after verifying your domain. Team adds domain capture and just-in-time provisioning — accounts are created at first login — while Enterprise and Console organizations add SCIM for automated provisioning and deprovisioning, and Console organizations can require SSO for every member. For a company rolling Claude out to a whole team, SSO is one of the first settings we configure in a Cowork & Agentic Adoption engagement. All seven ways to get Claude are compared in Seven paths to Claude.