Single Sign-On (SSO)

To access your Workiro account, you have three sign in options:

• Email & Password – Enter your Workiro email and password
• Sign in with Microsoft – Use your Microsoft account for Single Sign-On (SSO)
• Sign in with Google – Use your Google account for Single Sign-On (SSO)

Using Microsoft Single Sign-On (SSO)

1. Click "Sign in with Microsoft" on the sign in page
2. Enter your Microsoft credentials
   • If you are already signed into a Microsoft account in your Browser, you will be automatically signed in to the relevant Workiro Account, providing it exists
   • If you have multiple Microsoft accounts, you will be prompted to choose which account to use for SSO
3. When prompted, allow the Microsoft "permissions requested" so the Workiro app can access your Microsoft account for SSO purposes
4. Providing your Microsoft User Principle Name (UPN) email address matches your Workiro email address, you will be signed in seamlessly.

Using Google Single Sign-On (SSO)

1. Click "Sign in with Google" on the sign in page
2. Enter your Google credentials
   • If you are already signed in to a Google account in your Browser, you will be automatically signed into the relevant Workiro Account, providing it exists
   • If you have multiple Google accounts, you will be prompted to choose which account to use for SSO
3. When prompted, allow Google to "Sign in to Workiro" so the Workiro app can access your Google account for SSO purposes
4. Providing your Google Account email matches your Workiro email, you will be logged in seamlessly

Multi-Factor Authentication (MFA) & Organisational Settings

• Your organisational settings will determine whether the Workiro SSO application must first be approved. An approval request can be sent via the login screen.
• Whether MFA is required depends on whether you or not you have MFA configured against your Microsoft or Google account, this may depend on your organisation's security settings
• Any other Sign in requirements (such as device restrictions or conditional access policies) are managed by your organisation

Configuring SSO for your team

To enable SSO for your team an owner or admin may navigate to Settings > Team > Security and switch on the appropriate identity provider.

Enforcing SSO

For additional security, you may require team members to sign in using SSO. By switching 'Required' on the following will happen:

•  
  • You will be signed out and have to sign back in using SSO.
  • Your team members will be signed out within the next ten minutes and have to sign back in using SSO.
  • You and your team will no longer be able to use any existing Workiro email and password for access.
  • New team members will have to use SSO to accept their invitation to join your team.

Setting an Email Alias

You may set an Email Alias for yourself or your team members. The Alias is used for display purposes throughout Workiro, allowing you to sign in with one email address but be known by another. You can add an Email Alias by editing your team member's profile as shown below. A verification email will be sent to the alias for authorisation/confirmation before it can be used.