How to enable Single Sign-On (SSO) for your company users

Single Sign-On (SSO) lets your company users sign in to Remote using your existing identity provider, such as Okta or Google Workspace. This improves security and reduces the need for separate passwords.

Important: Before you can activate SSO, you must have at least one company domain verified. Domain verification is a required security step that proves ownership of your domain. For detailed instructions on domain verification, please refer to our SSO Domain Verification Guide.

Step 1: Open Single Sign-On settings in Remote

1. Sign in to Remote as a company owner or company admin.

2. Go to Company settings.

3. Select Security.

4. Select Single sign-on.

Step 2: Add and verify your company domain

1. Enter your company domain (for example, company.com).

2. Copy the TXT record shown in Remote.

3. Add the TXT record to your domain’s DNS settings.

4. Return to Remote and select Verify domain.

Once the domain is verified, you can continue with the SSO setup. Note that you’ll need at least one verified domain before you can proceed with enabling SSO.

See also: How to add and verify your company domain

Step 3: Turn on Single Sign-On in Remote

After at least one domain is verified:

1. In the Single sign-on section, select Turn on Single Sign-On.

2. Remote will display values you’ll need to configure your identity provider, including URL and Audience

Step 4: Create a Remote app in your identity provider

1. Sign in to your identity provider (IdP).

2. Create a new app for Remote.

3. Use the URL and Audience provided in Remote to configure the app.

4. After the app is created, your identity provider will generate an SSO URL and a security certificate associated with your new Remote App.

Step 5: Complete the setup in Remote

1. Return to the Single sign-on section in your Remote's company settings.

2. Paste the SSO URL provided by your identity provider.

3. Upload the certificate file from your identity provider.

4. Select Turn on Single Sign-On.

Once this is complete, your company users can log in to Remote using SSO 🎉

See the step-by-step guides for supported providers

• Setting up SSO in Remote with Okta
• Setting up SSO in Remote with OneLogin
• Setting up SSO in Remote with JumpCloud
• Setting up SSO in Remote with Google Workspaces
• How can a company enable login via Single Sign-On for their company users?

Frequently Asked Questions (FAQs)

• Can I disable SSO enforcement after enabling it?
  Yes. You can turn it off anytime in Company settings > Security > SSO. Team members will be notified by email to log in using their email and password again.
• Can I enable SSO enforcement only for some of my team members?
  Yes, you can decide whether to enable SSO for your admins, employees, contractors, or any combination of these categories. 
• What happens if a team member is terminated?
  If you terminate an employee or contractor, their login reverts to their personal email, so they can still access key documents.