Single Sign-On (SSO)

To access your Workiro account, you have three login options:

• Email & Password – Enter your Workiro email and password as usual
• Sign in with Microsoft – Use your Microsoft account for Single Sign-On (SSO)
• Sign in with Google – Use your Google account for Single Sign-On (SSO)
  
  

Using Microsoft Single Sign-On (SSO)

1. Click "Sign in with Microsoft" on the login page
2. Enter your Microsoft credentials
   • If you are already signed into a Microsoft account in your Browser, you will be automatically signed into the relevant Workiro Account, providing it exists
   • If you are signed into multiple Microsoft accounts, you will be prompted to choose which account to use for SSO
3. When prompted, allow the Microsoft "permissions requested" so the Workiro app can access your Microsoft account for SSO purposes
4. Providing your Primary Microsoft email matches your Workiro email, you will be logged in seamlessly.

Using Google Single Sign-On (SSO)

1. Click "Sign in with Google" on the login page
2. Enter your Google credentials
   • If you are already signed into a Google account in your Browser, you will be automatically signed into the relevant Workiro Account, providing it exists
   • If you are signed into multiple Google accounts, you will be prompted to choose which account to use for SSO
3. When prompted, allow Google to "Sign in to Workiro" so the Workiro app can access your Google account for SSO purposes
4. Providing your Google Account email matches your Workiro email, you will be logged in seamlessly

Multi-Factor Authentication (MFA) & Organisational Settings

• Your organisational settings will determine whether the Workiro SSO application must first be approved. An approval request can be sent via the login screen.
• Whether MFA is required depends on whether you or not you have MFA configured against your Microsoft or Google account, this may depend on your organisation's security settings
• Any other login requirements (such as device restrictions or conditional access policies) are managed by your organisation

Configuring SSO for your team

To enable SSO for your team an owner or admin may navigate to Settings > Team > Security and switch on the appropriate identity provider.

Enforcing SSO

For additional security, you may require team members to sign in using SSO. By switching 'Required' on the following will happen:

• • You will be signed out and have to sign back in using SSO.
  • Your team members will be signed out within the next ten minutes and have to sign back in using SSO. 
  • You and your team will no longer be able to use any existing Workiro email and password for access.
  • New team members will have to use SSO to accept their invitation to join your team.
  • Individual exceptions can be made for team members (for example, some accounts may be required for an integration to work). Coming soon...

Supporting Email alias (Coming Soon...)

• Whilst we currently support SSO to Workiro by matching with your Primary Microsoft email address, we plan to support the Microsoft UPN in future, and thereafter allow selection of any email alias.