SSO(Single Sign-On)
Website and technology
Website and technology
SSO (Single Sign-On) gives you access to multiple apps and websites with one set of login credentials. You sign in once with a central provider, which then confirms who you are.
You probably know SSO from buttons such as 'Sign in with Google' or 'Sign in with Microsoft'. Inside an organisation it works the same way: you sign in once with your work account and then reach your email, Slack, HR system and other tools without signing in again.
Why it helps: you remember one strong password instead of dozens, you save time and you manage security centrally. You enforce two-factor authentication (MFA) in one place, and when someone leaves you revoke all their access at once.
There are two forms. With consumer SSO (social login) you use your personal Google, Microsoft or Apple account to sign in to apps. With enterprise SSO, IT manages employee access through an identity provider (IdP) such as Microsoft Entra ID (formerly Azure AD), Google Workspace, Okta or Ping Identity. Okta and Ping are vendor-neutral and connect apps from many suppliers.
Behind the scenes SSO runs on open standards. OAuth 2.0 handles permission (an app may act on your behalf), OpenID Connect (OIDC) adds a trusted identity on top, and SAML is the older, widely used standard for business SSO.
How to apply it: choose the identity provider your organisation already uses, check that the app supports SAML or OIDC, connect the app in your IdP (usually with a metadata URL and your organisation's email domains) and test with a few accounts before moving everyone over.
In Lovable, workspace SSO is part of the Business and Enterprise plans and supports SAML and OIDC. Your team signs in to Lovable with your own identity provider account, such as Microsoft Entra ID, Google Workspace or Okta. An owner or admin verifies the domain and connects the identity provider via Workspace settings → Access → Identity. Check lovable.dev for the current conditions per plan.
Tip
SSO is a single point of failure: if the identity provider is down you cannot get in anywhere, and whoever takes over your SSO account can reach every connected app. Always enable MFA and keep an emergency account outside SSO.