Configuring SSO options

you can configure single sign on (sso) to allow your users to log in using your organization's identity provider without generating a separate charthop password while it is optional, we recommend that you require sso, as it's easier and safer for your users charthop supports using one saml based identity provider at a time, as only one sso metadata file can be associated with your charthop account because google sso does not use saml 2 0, it is possible to enable google sso in addition to a saml based identity provider if you want to use a saml 2 0 identity provider that is not listed here, contact charthop support for assistance when you enable sso, you can upload your sso metadata file and customize your sso login button image single sign on supported identity providers charthop supports the following identity providers sso option description google enables google sso login recommended if your organization uses g suite can be used in conjunction with an additional saml 2 0 based sso configuration microsoft enables microsoft sso login recommended if your organization uses azure active directory okta enables okta sso login recommended if your organization uses okta onelogin enables onelogin sso login recommended if your organization uses onelogin azure active directory enables azure sso login recommended if your organization uses azure active directory adp enables adp sso login when charthop is connected to adp via the adp marketplace app allowing password login if you choose not to use sso to manage user logins, you also have the option to use standard password logins for security reasons it is generally not recommended to use both sso and password login unless you have users from outside your organization who lack sso to sign in you have the option to restrict the password login from specific ip addresses if you would like to do so, add the ip addresses in the only allow password based login from specific ips (comma separated) input note that this only applies to password login, so users with sso will be able to login from any ip address