Single sign-on (SSO) lets your team access Dotdigital accounts through your identity provider (IdP). Managing SSO at a user level gives you control over how individual users log in, so you can apply different access rules across accounts in your team structure.
Before you start
Things you need to know:
You must be logged into a top-level, parent account to manage SSO access.
You must be the account owner, or a user with the Can manage account permission enabled.
If you enable SSO login for a managed user, ensure they exist within your identity provider, IdP, otherwise they can't access the relevant accounts.
Required permissions
To use this feature, you must have the Can manage account user permission.
Enable or disable SSO for a user
Managing SSO access at a user level is useful when granting access to people outside your organisation, for example, marketing consultants or a development agency. When you edit a managed user, you can manage their SSO access to each account in your team structure individually, applying different login requirements across accounts.
Account-level SSO configuration
If one or more of your accounts doesn't have SSO configured at account level, you can't grant SSO access to users on those accounts. The option displays N/A instead of a toggle switch.
To manage SSO access for a user:
Expand the User menu and go to Settings > Users and teams > Users.
Select the user you want to manage SSO settings for.
Under Settings, on the Accounts tab, select YES or NO to enable or disable SSO login for the user on the relevant account.
Select SAVE.
For accounts where Log in with SSO is set to YES, the managed user must log in through SSO. For accounts set to NO, they log in with their Dotdigital username and password.
Learn more in Log in using SSO.