Skip to main content
If your company uses an identity provider like Okta or OneLogin, your IT department will want to configure SAML. SAML SSO lets your team members sign in to the Latitude.sh dashboard through your identity provider, so access follows the accounts your company already manages. To also add, update, and remove members from your identity provider, set up Directory sync (SCIM).

​
Get access to SAML SSO

SAML SSO is available as an add-on that you can purchase directly from your dashboard. Pricing: $125/month. Latitude.sh supports all major identity providers and then some. Here’s a non-exclusive list of supported providers. If your identity provider is not listed here, reach out to support for assistance.
  • ADP
  • Active Directory Federation Services
  • Auth0
  • Azure Active Directory
  • CAS
  • ClassLink
  • Cloudflare
  • CyberArk
  • Duo
  • Generic OIDC
  • Generic SAML
  • Google
  • JumpCloud
  • Keycloak
  • LastPass
  • Login.gov
  • miniOrange
  • NetIQ
  • Okta
  • OneLogin
  • Oracle
  • PingFederate
  • PingOne
  • Rippling
  • Salesforce
  • Shibboleth
  • Shibboleth Generic
  • SimpleSAMLphp
  • VMware

​
Configuring SAML

Prerequisites:
  • Your team must be verified. If it isn’t yet, complete the verification process first.
  • You must be the team Owner or an Administrator.

​
Step 1: Purchase SAML SSO

1

Navigate to SSO settings

From the dashboard, navigate to Settings → Members & access → SSO & Directory Sync tab.
2

Open SSO setup

In the SAML SSO row, click Set up.
3

Review your domain

SSO is set up for the domain of your email address, for example company.com. Personal email domains, like gmail.com, aren’t eligible. To use a domain other than your own email’s, contact support.
4

Complete the purchase

Click Set up to complete the purchase.

​
Step 2: Complete SSO configuration

After purchasing, the SAML SSO row shows a Pending status. Click Complete setup to open the guided setup in a new tab, then select your identity provider and follow the steps to finish configuring SAML. Once your identity provider is connected, the row shows a Connected status along with your team’s domains.

​
Managing domains

SSO applies to the domains listed in the SAML SSO row. To manage them, click the … menu in the row:
  • Add domain: Verify ownership of another domain through the guided setup. The domain is listed with its verification status until it’s verified.
  • Manage: Open the SSO management page to update your identity provider connection.
To remove a domain that hasn’t been verified, click the trash icon next to it. Your team always keeps at least one domain.

​
Authenticating with SAML

Once you have configured SAML, your team members can use SAML SSO to log in. Type your email address on the authentication page and the Continue with SAML SSO button will become available. If you are already logged in to your identity provider, you will be automatically logged into Latitude.sh. If not, you will be redirected to your identity provider to finish authenticating.
Once SAML SSO is active, users with emails from your team’s domains will only be able to authenticate through SAML SSO.