Set up and manage Single Sign-On (SSO) to let your users log in to Reveal using identity providers like Okta or Entra ID. You must have Admin permissions in Reveal to set up SSO.

SSO allows the users on your Reveal account to log in with the same set of credentials as they use for other apps, such as a username and password.

In this article:

Connecting a domain using Single Sign-on

To connect a domain using Single Sign-on:

1. Go to Account profile > My Account.
2. In the User and Account Preferences panel, click Manage Single Sign-On.
3. Click ADD CONNECTION.
4. Enter the email domain that your company uses to log in to Reveal. The email domain is the part of an email address after the @ symbol. To add more than one email domain, click ADD ANOTHER DOMAIN.
5. Click SUBMIT to continue.
6. Review the details on the Confirm details and continue page. Click CONTINUE.
7. You are brought to the vendor’s site to continue the connection process. Click Get Started.
8. Select your identity provider and click Next.
9. Follow the steps onscreen to complete the connection process. For help, visit the Auth0 documentation site.
10. When your connection is complete, you see the Single Sign-On settings page. From this point onwards, users will be prompted to sign in to Reveal using SSO.

To add multiple Reveal accounts that share an email domain, contact Support.

Deleting a Single Sign-on connection

To delete a Single Sign-On connection:

1. Go to Account profile > My Account.
2. In the User and Account Preferences panel, click Manage Single Sign-On.
3. Find the connection you want to delete and click DELETE CONNECTION.
4. On the pop-up, click DELETE CONNECTION.

Key terms

• Single Sign-On (SSO): A way to sign in to several different apps, like Reveal and your work email, using just one username and password. It’s also known as Enterprise login or One login.
• Identity provider (IdP): A service that stores and manages login information, such as Okta, Entra ID, and Google workspace.
• SAML (Security Assertion Markup Language): A secure method that lets your identity provider tell Reveal that you are authorized to sign in.