Single sign-on, or SSO, lets users use one set of login details across multiple platforms. This saves time, makes logging in easier, and allows system administrators to control access to online services.

Using single sign-on will let your employees log in faster and avoid the hassle of remembering another username and password. This feature adds flexibility to the Planday login process and reduces administrative tasks in the long run.

Follow the steps below to set up SSO in Planday and start using it with your identity provider.

Navigate to Settings > Security > Single sign-on (SSO), select one of the supported identity providers, and click Configure.
​

Continue setting up by giving a title to identify this authentication provider configuration. This title will only be visible in the configuration menu for admins managing it.

Next, add a label to the button that will appear on the login screen of your Planday organisation (for example Sign in with Microsoft). On the right side, you will see a preview of the button.

Enabling Set as default for login will automatically assign this authentication provider for new employees when they are created in Planday.
​

To connect Planday with your identity provider, upload a SAML Identity Provider Metadata file or import it using a link.
​

Finally, choose the employees who should use the authentication provider to log in to Planday.

Click Save in the top right corner.
​

If the checkbox Set as default for login is not selected, you can choose how employees should log in when you create their accounts.

Go to People > Employees > Create employee > Create one employee. Fill out the employee form and specify the authentication provider.

Press (X) to remove the authentication if the employee should use a username and password to log into Planday. Remember to send an invite email so the employee can set their password in this case.
​

You can change an employee's authentication provider from the People > Employees page. Click on the employee and update the SSO Authentication provider field. If the employee should log in with a Planday username and password, select None. Remember to send an invite email so the employee can set their password in this case.
​

When the SSO configuration is completed and enabled, your employees will see a new button to log in through the identity provider on the login screen.

Employees assigned to use the identity provider authentication method can click on the new button (e.g. Sign in with Microsoft).

Employees that do not have an SSO assigned can continue to use the username/password method to login.

When SSO is enabled, employees will see an additional login option to use SSO, along with their regular username and password, both on the browser and the Planday app.

When employees should no longer have access to Planday, make sure to deactivate them in both Planday and your company’s identity provider.

If you only deactivate them in the identity provider, they might still be able to access Planday for a few hours due to active sessions. See How to deactivate or reactivate an employee to learn more.