Skip to content
Zanbase

Help

Set up single sign-on

Register an OIDC identity provider, verify your domain, test sign-in, and require it for your workspace.

Security and sign-in

Single sign-on lets people use your organization’s identity provider to access Zanbase. Set up the provider, prove you control the email domain, and test sign-in before requiring it.

Before you start

You must be a workspace Owner or Admin. You need an OpenID Connect (OIDC) application with your identity provider, its issuer and discovery addresses, client credentials, and access to your domain’s DNS records. Check Pricing for single sign-on availability.

Register the provider

  1. Open Settings.
  2. Select General.
  3. Open Security.
  4. Select Add provider.
  5. Enter the Email domain.
  6. Enter the Issuer URL.
  7. Enter the Discovery endpoint.
  8. Enter the Client ID.
  9. Enter the Client secret.
  10. Select Register provider.

Verify your domain

  1. Read the DNS TXT records displayed under the Unverified provider.
  2. Add the displayed records through your domain’s DNS service.
  3. Return to Zanbase.
  4. Select Verify domain.
  5. Check that the provider shows Verified.

If the DNS record cannot load, select Try again.

Test and require company sign-in

  1. Select Test company sign-in on the verified provider.
  2. Complete the identity provider’s sign-in flow.
  3. Return to Security.
  4. Select Enforce SSO when you are ready to require company sign-in.
  5. Check that the provider shows Enforced.

Good to know

Enforcement applies to this workspace. Other workspaces keep their own sign-in rules. Use Disable enforcement to stop requiring the provider, or Remove to delete its configuration.

Members can use company sign-in from the login screen.

Related resources

Sign in to Zanbase

Use Google, GitHub, company sign-in, an email code, or a passkey.

ChatGPT

Connect ChatGPT through Zanbase’s MCP server to read and change workspace information with your permissions.

Search Zanbase