Skip to main content

Single sign-on (SSO)

You can log in to the Sitecore Cloud Portal using the default Sitecore authentication or using SSO. With single sign-on, teams can log in to the Sitecore Cloud Portal and Sitecore apps using their existing identity providers.

Sitecore Cloud Portal supports identity providers that use the OpenID Connect (OIDC) protocol.

Enabling SSO

When your organization has an enabled SSO connection:

  • Team members that [have an email address with/belong to] the enabled SSO connection will log in using their identity provider. Other team members can still log in using the default Sitecore authentication.

  • You can only send new invitations to email domains registered with your enabled SSO connections. You cannot send invitations to email addresses that are not associated with an enabled SSO connection. OR

    You can only send invitations to [users/email addresses] that belong to an enabled SSO connection.

For more information about how SSO impacts your Sitecore Cloud Portal organization, see the Troubleshooting FAQ.