ENTERPRISE·Team Plan required
Single Sign-Onfor your entire team
Provision your organization on StatVault with SAML 2.0 or OIDC. One login, zero friction, full audit trail.
Works with any standards-compliant IdP
OktaAzure ADGoogle WorkspaceAuth0OneLoginPingIdentityKeycloak+ any SAML/OIDC
🔐
SAML 2.0 & OIDC
Works with Okta, Azure AD, Google Workspace, Auth0, and any standards-compliant IdP.
⚡
Auto-provisioning
New employees log in with company credentials and get a StatVault account automatically.
🏢
Domain enforcement
Users on your domain are redirected to SSO — no password login allowed.
👥
Seat management
Define a seat cap. Excess users are queued for admin approval.
🔄
Just-in-time provisioning
Accounts created on first login, synced on every subsequent login.
📋
Audit trail
Every SSO login event is captured in the audit log.
Setup in 5 steps
1
Register your domain
Tell us which email domain your organization uses (e.g. acme.com).
2
Add a DNS TXT record
We give you a verification token. Add it as a TXT record to prove domain ownership.
3
Configure your IdP
Enter your OIDC discovery URL (or SAML metadata URL). We handle the rest.
4
Test the connection
Use our SSO test flow to confirm authentication works end-to-end.
5
Enforce for your domain
Enable domain enforcement — your team logs in with SSO from that point on.
Ready to provision your team?
Enterprise SSO is included in the Annual Team Plan ($299/yr · 5 seats). Contact us for larger seat counts and custom SLAs.