Single sign-on
Single sign-on lets people on your company’s email domain sign in and, optionally, join the organization automatically.
Configuring
Section titled “Configuring”SSO is configured by Screel as part of onboarding — contact support with your provider and domains. The owner sees the result on Organization → SSO: provider (Google Workspace or Microsoft Entra ID), verified domains, and the three switches below. The page is read-only.
Domains
Section titled “Domains”A domain can be claimed by one organization. Public mail domains (gmail.com and the like) cannot be claimed. Domain ownership is verified by Screel with you, not by an automated DNS check.
Options
Section titled “Options”| Option | Effect |
|---|---|
| Auto-provision | People signing in with Google on a claimed domain are handled automatically: new accounts join as members on a free viewer seat; existing accounts get a join request to accept or decline. See Members. |
| Require SSO | Password sign-in is disabled for members; they must use the identity provider. |
| Default role | Recorded for the organization; auto-provisioned accounts always join as members regardless. |
Auto-provisioning never blocks a sign-in: if no viewer seat is free, the person signs in as a regular account and can be added later.