Skip to content

Admin & Security · · 2 min read

Single sign-on (SSO)

Sign in to Snowfire through your identity provider, such as Okta or Microsoft Entra ID, and manage your sign-in methods from Profile.

What it’s for

Sign in to Snowfire through your identity provider, such as Okta or Microsoft Entra ID, with multi-factor authentication.

Before you start

  • Your company must have SSO set up. Admins see the details in Settings, on the SSO tab.
  • Use your work email, on a domain your company federates.

Steps

Sign in with SSO

  1. Open Sign in to Snowfire.
  2. Enter your work email and continue.
  3. Choose Continue with your identity provider. Snowfire redirects you to your organization’s sign-in.
  4. Sign in there. You return to Snowfire when you are done.
Continue with SSO card with a work email and a Continue with Okta button
Sign in with SSO.

Choose Use another email to start over with a different address. You can also sign in with a passkey once you add one.

See your SSO settings (admins)

  1. Go to Settings and open the SSO tab.
  2. Read SSO information: your identity provider, federated email domains and identity provider ID. These details are read-only.
Settings SSO tab with read-only SSO information, the Reconciler with a template user, and its history
Settings, SSO: SSO information and the Reconciler.

Give new SSO users the right access (admins)

  1. Under Reconciler, turn on Enable reconciler.
  2. Under Template user, choose Select an active user and pick the person whose permissions new SSO users should get.
  3. Choose Save. Snowfire confirms SSO reconciler settings saved.
  4. Check History. It lists recent reconciler actions: the date and time, the new user, the reconciler user and a status of Success or Failed. Choose Refresh to load the latest.

Check and fix

Snowfire supports enterprise identity standards across the full sign-in flow, including hosted login, account linking, company assignment and deployment configuration.

ProblemFix
Sign-in failed. Please try again.Start again from the sign-in page.
You used the wrong email.Choose Use another email.
SSO information reads No federated domains configured.No email domain is federated for your company yet, so SSO sign-in cannot match your work email.
Template user reads Turn on the reconciler to choose a user.Turn on Enable reconciler first.
Template user reads No active users are available for this organization.Invite or reactivate a user to act as the template. See Inviting your team.
A History row reads Failed.The new user did not get the template permissions. Check that the template user is still active, and set the new user’s access in Settings, Users.

Related articles

Can't Find What You Need?

Our support team is here to help. Get in touch and we'll respond within 24 hours.

Contact Support