Single sign-on SSO lets users use one set of login details across multiple platforms. This saves time and makes logging in easier and allows system administrators to control access to online services.

Using single sign-on will let your employees log in faster and avoid the hassle of remembering another username and password. This feature adds flexibility to the Planday login process and reduces administrative tasks in the long run.

Follow the steps below to set up SSO in Planday and start using it with your identity provider.

Planday supports, but is not limited to, the following identity providers:

You will need administrator access to your identity provider to access the necessary details and set up SSO in Planday. We recommend involving your IT department (if applicable) to assist with this setup.

Go to your identity provider’s website to configure SSO and generate a SAML 2.0 metadata file. You can find setup guides for each of the Planday-supported identity providers on Planday's SSO configuration page or in the links provided above.

Make sure your SAML 2.0 metadata file is aligned with Planday's SAML 2.0 SSO entity.

Download the Planday XML file with the necessary details from this link: Planday XML File.

Details from the XML file:

Ensure your identity provider supports the following Claim Types for SAML response in Planday SSO:

Navigate to Settings > Security > Single sign-on (SSO), select one of the supported identity providers, and click Configure.
​

Continue setting up by giving a title to identify this authentication provider configuration. This title will only be visible in the configuration menu for admins managing it.

Next, add a label to the button that will appear on the login screen of your Planday organisation (for example Sign in with Microsoft). On the right side, you will see a preview of the button.

Enabling Set as default for login will automatically assign this authentication provider for new employees when they are created in Planday.
​

To connect Planday with your identity provider, upload a SAML Identity Provider Metadata file or import it using a link.
​

Finally, choose the employees who should use the authentication provider to log in to Planday.

Click Save in the top right corner.
​

If the checkbox Set as default for login is not selected, you can choose how employees should log in when you create their accounts.

Go to People > Employees > Create employee > Create one employee. Fill out the employee form and specify the authentication provider.

Press (X) to remove the authentication if the employee should use a username and password to log into Planday. Remember to send an invite email so the employee can set their password in this case.
​

You can change an employee's authentication provider from the People > Employees page. Click on the employee and update the SSO Authentication provider field. If the employee should log in with a Planday username and password, select None. Remember to send an invite email so the employee can set their password in this case.
​

When the SSO configuration is completed and enabled, your employees will see a new button to log in through the identity provider on the login screen.

Employees assigned to use the identity provider authentication method can click on the new button (e.g. Sign in with Microsoft).

Employees that do not have an SSO assigned can continue to use the username/password method to login.

When SSO is enabled, employees will see an additional login option to use SSO, along with their regular username and password, both on the browser and the Planday app.

When employees should no longer have access to Planday, make sure to deactivate them in both Planday and your company’s identity provider.

If you only deactivate them in the identity provider, they might still be able to access Planday for a few hours due to active sessions. See How to deactivate or reactivate an employee to learn more.
​