User guide
Sign-in and SSO setup
Looking for what it does rather than how to use it? Read the Sign-in and SSO overview .
Before you connect
Check your effective plan and administrator permissions. SSO is available on MSP Scale and Enterprise, and Organization Enterprise. Each organization controls its own connection; a provider’s connection does not automatically configure its clients.
You also need permission to register and consent to the connection in your external identity provider. Keep a verified recovery path before changing enforcement.
Configure and test sign-in
- Choose Microsoft Entra ID or Google in the organization’s identity settings.
- Register the connection with the identity provider using the redirect address shown in Solidlio.
- Enter the required connection details and test them.
- Review allowed domains, account creation and the default role for new members.
- Test sign-in with the intended users before requiring SSO.
- Review existing sessions and recovery access when changing enforcement.
Do not paste client secrets, access tokens or recovery codes into a support enquiry. Use the approved secure exchange process if support needs sensitive connection information.
Provisioning is a separate decision
SCIM lets a supported Entra ID or Okta configuration send user and group changes to Solidlio. Review organization scope, role mappings and what deactivation does before enabling it. Google sign-in does not establish a general Google directory, Calendar or Drive connector.
If sign-in fails
Check the connection status, redirect address, consent, approved domain, organization membership and plan access. If a user loses access, use the administrator recovery process and contact support with the error and time of the attempt, excluding credentials.