Skip to main content
Vizcom staff turn on SSO for Enterprise workspaces with your IT team; there’s no SCIM or directory sync. Vizcom supports SAML 2.0 (service-provider or identity-provider initiated) and OpenID Connect for Microsoft Entra ID. Okta, Entra ID, Google Workspace and other providers work.

Set up SSO

1

Contact Vizcom

Email your account team or [email protected] with your identity provider’s name.
2

Share your details

Send your IT admin’s email and every email domain your members use.
3

Connect your identity provider

IT follows Vizcom’s setup link, as described below.
4

Test and announce

Once Vizcom turns SSO on, have an admin and a member sign in, then send everyone Join your workspace.

What your IT team will need

  1. Verify your email domain. It can take up to 48 hours; Vizcom can verify it from a screenshot of your domain details.
  2. Connect the identity provider with the setup link, which shows your Identifier (Entity ID) and Reply URL. For Entra ID, upload the App Federation Metadata URL.
  3. Run the test connection, then tell Vizcom. Vizcom links your domains and turns SSO on.
If your identity provider needs the Entity ID to be a URL, tell Vizcom before you start.

Direct SAML values

Use these only if Vizcom tells you to.

How members sign in

The Vizcom sign-in page after clicking Continue with SSO, with anna@example.com in the email field and Continue with Google and Continue with email below. Callouts mark 1 the work email field and 2 the Continue with SSO button.

Enter your work email (1) and click Continue with SSO (2).

  1. On the sign-in page, click Continue with SSO.
  2. Enter your work email 1 and click Continue with SSO 2.
Once domains are linked, password sign-in is refused for them. On direct SAML and Entra ID, so are password resets and Google sign-in.

Provisioning and deprovisioning

  • Accounts are created, or linked to an existing password account, at first SSO sign-in.
  • Membership needs an invite unless join approval is off. Otherwise people see “No SSO enabled workspace was found”.
  • Roles are set in Vizcom, not your identity provider.
  • Offboarding is manual, and existing sessions keep working. Remove leavers in Settings > Members, then … > Log this user out of all devices.

Network requirements

Sign-in hosts to allow.

Security and privacy

Allowed domains and session timeout.