How to set up Single Sign-On (SSO) for your company in CloudChat

Single Sign-On (SSO) lets your team access CloudChat with the same corporate credentials they already use in Google Workspace or Microsoft Entra ID (Azure AD) — no separate password needed. You set it up yourself, in just a few minutes, through our wizard.

Step-by-step video (wizard setup):

Before you start

You'll need:

• To be an administrator of your CloudChat account.
• Permission to register/configure applications in your identity provider (Google Workspace or Microsoft Entra ID). Depending on your organization's policy, this may require an administrator — or it may already be available to you.
• To know your team's corporate email domain (e.g. yourcompany.com).

⚠️ Important — SSO does not create users. Single Sign-On only connects a person who already has access to CloudChat to their corporate identity. If someone on your team hasn't been added to your CloudChat account yet, they must be added normally before they can sign in with SSO. SSO authenticates; it does not grant new access on its own.

Step by step

1. Open the SSO wizard

In your account's admin panel, go to Settings → Corporate SSO.

2. Choose your provider

Select Google or Microsoft, depending on your company's identity provider.

3. Configure it on your provider

The wizard shows the details you need to register on your identity provider (such as the redirect / callback URL). Copy those and:

• Google Workspace: create the OAuth credentials in the Google Cloud Console and authorize the redirect URL provided.
• Microsoft Entra ID: register the enterprise application and add the redirect URL provided.

Then bring back to the wizard the values your provider generated (client ID and secret, or the federation details).

4. Prove domain ownership

Enter your company's email domain. SSO can only be enabled for a domain you prove belongs to your organization — this ensures no one configures login for a domain that isn't theirs.

5. Test the login

Run a test login with a corporate account that already exists in CloudChat. A successful sign-in confirms everything is set up correctly.

6. Enable it for your team

Pick the activation mode and finish. From then on, your team can sign in through the corporate login button.

Frequently asked questions

Does my team's password pass through CloudHumans? No. Authentication happens at your provider (Google/Microsoft); CloudChat only receives the identity confirmation.

Can I use Google and Microsoft at the same time? Yes. You can configure both providers for the same domain.

Can a brand-new user sign in directly via SSO? No. They must first be added to the CloudChat account. After that, SSO login works normally.

Does password login keep working? Yes. Enabling SSO doesn't remove password login.

I misconfigured something — what now? You can reopen the wizard and redo the steps at any time. If in doubt, contact our support.

Need help? Contact CloudHumans support.