SSO
Single Sign-On (SSO)
Single Sign-On (SSO) allows users to authenticate once and gain access to multiple applications and services without needing to log in separately to each one. With SSO integration, your organization can streamline user access to the Monad platform while maintaining security and compliance standards.
Benefits of SSO
- Simplified Access: Users sign in once through your identity provider and automatically gain access to Monad
- Enhanced Security: Centralized authentication reduces password fatigue and improves security posture
- Streamlined Management: IT administrators can manage user access through your existing identity management system
- Improved Compliance: Maintain audit trails and access controls through your organization's identity provider
How SSO Works with Monad
Monad supports two ways to sign in with SSO:
- Service Provider (SP) initiated login — Go to the Monad login page, choose Sign in with SSO, and enter your work email address. Monad looks up the SSO connection(s) registered for your email domain and redirects you to your identity provider to authenticate. If your email domain matches more than one connection, you'll be shown a picker to choose your workspace. This requires your organization's SSO connection to have your email domain(s) registered — see Enabling email-based SSO discovery.
- Identity Provider (IDP) initiated login — Sign in from your identity provider's portal (for example, by clicking the Monad tile in Okta), which redirects you into Monad already authenticated.
Enabling email-based SSO discovery
For SP-initiated login to route your users to the correct identity provider, your organization's SSO connection must have one or more email domains registered (for example, example.com). Public email providers (such as gmail.com) can't be used.
You can also set an optional public name on the connection — the label shown in the workspace picker when a user's email domain matches more than one connection. If you don't set one, a system-generated label is used instead.
Configure both on the SSO connection under your Monad organization's SSO settings.
Getting Started
To set up SSO for your organization, see the implementation details for your identity provider: