Set up SAML single sign-on

SSO is a Pro / Enterprise feature. Go to Org settings → SSO, paste your IdP metadata URL (or upload the XML), and add a domain you control. We auto-provision new users on first login and map IdP groups to roles via Group mapping.

Once configured, members of your verified domains land on a "Continue with SSO" prompt instead of password login.