Company sign-in (SSO)
What signing in through your company's Microsoft or Google does — for the owner, for every member and for IT, with all cases and frequent questions.
With company sign-in (single sign-on, SSO for short) a company's data opens only after a sign-in through the company's directory: Microsoft Entra ID or Google Workspace. This page explains everything in one place — what the owner sets up, what every member experiences and what the company's IT needs to know.
At a glance
Applies to the company's account
In addition, not instead
24 hours per device
Owner and customers exempt
Company account here always means the account the company set up for the person at Microsoft or Google, for example john.smith@example.com. It does not have to be the address the person is signed in to the app with.
What happens to whom
| Who | What happens |
|---|---|
| Owner | Sets up company sign-in and switches it off. It does not apply to them, so that a typo never locks out the whole company. |
| Already a member when it is switched on | Receives the e-mail Company sign-in required. The next time they open the company, the page Sign in with the company account appears. |
| Newly invited, with no sign-in yet | Registers through the invitation like anyone else: password, code, register the device, add a private address. Then signs in once with the company account. |
| Invited, with a sign-in of their own | Joins with their own sign-in. Their own account stays freely accessible; only the company asks for the company account and until then shows with a lock in the account switcher. |
| Administrators and all other members | As above: they need the company account too. Only owners see the Sign-in area in the settings. |
| The company's customers | Nothing changes. The customer portal opens as before. |
There is no registration of its own through company sign-in. You always come into the company through its invitation; company sign-in only decides whether its data opens.
For the owner: setting it up
Under Administration → Settings → Sign-in:
- Switch the switch on.
- Choose the provider: Microsoft (Entra ID) or Google Workspace.
- Enter the tenant ID or the Workspace domain.
- Save the SSO setting — you briefly confirm that it is you.
All steps with pictures are also under Setting up company sign-in.
From saving on, company sign-in applies. Your team learns of it by notification, and the header of the settings shows Company sign-in active.
Clarify first: does every member have an account in your directory? Whoever has none can no longer reach the company's data after it is switched on, until they get one or end their membership. Their own account stays theirs in any case.
For members: what it looks like
Sign in with the company account
When you open the company, this page appears until you have signed in with the company account on this device.
- Sign in with Microsoft (or Google, depending on the company) takes you to the company's provider. Sign in there with your company account. Then you continue exactly where you were.
- End membership if you no longer work for the company or the invitation was a mistake. You only leave its account.
Back takes you to your other accounts without company sign-in. If you belong to no other account, the button is missing.
The company in the account switcher
As long as the sign-in is pending, the company shows in the account switcher with a lock and the notice Company sign-in needed. Until then the app opens nothing from this company, neither its projects nor its notifications; you use your other accounts as usual. A tap on the company opens the page above.
If the sign-in is turned away
Two reasons occur:
- The account does not belong to the company's directory. Usually a private account was still signed in at the provider. Sign out there or switch the account and try again with your company account.
- The company account is already linked with another person. Every company account opens the company only for the one person it was first signed in with. Use your own company account; if the first link was a mistake, the company's owner helps.
More under Signing in → If company sign-in is turned away.
If you leave the company
With the invitation you added a private address. If the company removes you or you end the membership, your sign-in runs through this address from then on: the company's mailbox no longer opens your own account, and your account, your profile and your own projects stay yours.
For the company's IT
Frequent questions
Can a member still sign in with a password? Yes. Password, passkey, Google and Microsoft still lead into the app and into all of the person's other accounts. Only the company's data additionally requires the company account.
Does the e-mail address in the app have to be the company address? No. What matters is that the person signs in at the provider with an account from your directory. The first time, it is linked with them.
What happens after 24 hours? When the person opens the company again, the app asks for the company account again. If they are still signed in at the provider, it usually takes one click.
Why is the owner exempt? They manage the setting themselves. If it applied to them too, nobody could correct it after a typo in the tenant ID.
Is it worth it for small teams? Only if you use Microsoft 365 or Google Workspace anyway. Without a company directory, passkey and two-factor protect just as well, with no extra administration.
How do I switch it off again? In Administration → Settings → Sign-in, switch it off and Save the SSO setting. From then on the data opens again without company sign-in, and the team learns of it by notification.
Where to go next
- Settings: set up company sign-in step by step
- Registration: invited into a company with company sign-in
- Signing in: what changes for members when signing in