Enterprise SSO

The Enterprise SSO tab allows configuring single sign-on with your SAML or OIDC identity provider. These are systems like Okta, Microsoft Entra, and OneLogin.

SAML

SAML allows for your organization's users to sign in to Invoiced.ai via your identity provider. By clicking the SAML Self-Service button, you will be able to integrate your identity provider with Invoiced.ai using a guided setup process.

SCIM

SCIM allows for syncing your organization's users to Invoiced.ai. This ensures Invoiced.ai users are added and removed automatically as users are added and removed from your identity provider. Without SCIM, you will need to manually add and remove users from Invoiced.ai. By clicking the SCIM Self-Service button, you will be able to sync your identity provider with Invoiced.ai using a guided setup process.

Basic Configuration

By toggling the Enable SSO setting on, you organization will require users access Invoiced.ai via your identity provider.

Please note the following warnings:

• Your organization will no longer be accessible from the main invoiced.ai website. You must sign in via your custom subdomain or domain.
• The organization owner (i.e. the person who created the organization at Invoiced.ai) will still be able to sign in via the main invoiced.ai website without SSO. This is to prevent all users being permanently locked out of your organization if either your identity provider or domain becomes unavailable or misconfigured.
• Clients and vendors will still be able to sign in using normal methods (such as email and password or Google sign-in).