Single Sign-On

Kartorium organization administrators can start a guided single sign-on (SSO) setup without exchanging identity-provider credentials with Kartorium.

Create a setup link

1. Sign in to the organization you administer.
2. Open Organization, then Basic Info.
3. In Single sign-on, select Create SSO setup link.
4. Open Continue SSO setup, or send that link to your organization’s identity administrator.
5. Follow the hosted setup instructions for Microsoft Entra ID or another supported enterprise identity provider.

The link is restricted to the current Kartorium organization and expires after one hour. Create a new link if it expires.

After the identity administrator completes and verifies the guided setup, users can sign in through the configured enterprise connection. Matching users are assigned membership in the organization when they sign in.

Security

• The identity administrator enters configuration details directly in Auth0’s hosted flow.
• Kartorium does not ask for the identity provider’s administrator password.
• Only a Kartorium organization administrator can create the setup link.
• Treat the setup link as sensitive until it expires.