SAML Single Sign-On

Let your team sign in to Superflow through your identity provider, like Okta or Microsoft Entra ID.

Workspaces on Enterprise plans can sign in through their own identity provider using SAML SSO. Once configured, your team signs in at your workspace’s dedicated URL, for example app.usesuperflow.com/saml/acme/login, and is redirected through your identity provider.

SAML SSO is enabled per workspace. Contact us at [e-mail] to turn it on for yours; the SAML tab then appears under Settings.

Configuring

1. Create a SAML app in your identity provider

   In Okta, Microsoft Entra ID, or any SAML 2.0 provider, create an application for Superflow. You will need its Entity ID, SSO URL, and X.509 certificate.

2. Fill in the SAML tab under Settings

   Basic settings: a Display Name for the connection, your company’s Email Domain, and a URL Slug which becomes your sign-in URL. SAML settings: the Provider ID, Entity ID, SSO URL, and X.509 certificate from your identity provider.

3. Share the sign-in URL with your team

   Your team signs in at app.usesuperflow.com/saml/your-slug/login, or from the general SSO page at app.usesuperflow.com/saml/login by entering their work email.