Home Account, users and permissions How to set up your company's Single Sign-On (SSO) in CloudChat

How to set up your company's Single Sign-On (SSO) in CloudChat

Last updated on Sep 09, 2026

How to set up your company's Single Sign-On (SSO) in CloudChat

Single Sign-On (SSO) lets your team access CloudChat with the same corporate credentials they already use in Google Workspace or Microsoft Entra ID (Azure AD) — with no separate password. You set it up yourself, in just a few minutes, using our wizard.

Step-by-step video (setup through the wizard):

Before you start

You will need:

  • To be an administrator of your CloudChat account.
  • To have permission to register/configure applications in your identity provider (Google Workspace or Microsoft Entra ID). Depending on your organization's policy, this may require an administrator — or it may already be available to you.
  • To know your team's corporate email domain (e.g., yourcompany.com).

⚠️ Important — SSO does not create users. Single Sign-On only connects a person who already has access to CloudChat to their corporate identity. If someone on your team has not been added to the CloudChat account yet, they need to be added the usual way before they can sign in via SSO. SSO authenticates; it does not grant new access on its own.

Step by step

1. Open the SSO wizard

In your account's admin panel, go to "Configurações → SSO corporativo" (Settings → Corporate SSO).

2. Choose your provider

Select Google or Microsoft, according to your company's identity provider.

3. Configure it in your provider

The wizard will show you the details you need to register in your identity provider (such as the redirect / callback URL). Copy those details and:

  • Google Workspace: create the OAuth credentials in the Google Cloud Console and authorize the redirect URL provided.
  • Microsoft Entra ID: register the enterprise application and add the redirect URL provided.

Then bring back to the wizard the details your provider generated (client identifier and secret, or the federation details).

4. Prove domain ownership

Enter your company's email domain. SSO can only be enabled for a domain you prove belongs to your organization — this ensures nobody sets up login for a domain that isn't theirs.

5. Test the login

Run a test login with a corporate account that already exists in CloudChat. If it signs in successfully, the wizard confirms that everything is set.

6. Enable it for the team

Choose the activation mode and finish. From then on, your team can sign in using the corporate login button.

Frequently asked questions

Does my team's password go through CloudHumans? No. Authentication happens in your provider (Google/Microsoft); CloudChat only receives the identity confirmation.

Can I use Google and Microsoft at the same time? Yes. You can configure both providers for the same domain.

Can a new user sign in directly via SSO? No. They first need to be added to the CloudChat account. After that, SSO login works normally.

Does password login keep working? Yes. Enabling SSO does not remove password login.

I got a setting wrong — what now? You can reopen the wizard and redo the steps at any time. If you have any questions, talk to our support team.

Need help? Talk to CloudHumans support.