Require Single Sign-on
Make everyone with your company email sign in through Google Workspace or Microsoft Entra ID.
About 5 minutes
What You Need
- Studio Plan
- Owner or Admin Role
- Access to your domain's DNS settings
- 1
Add Your Domain
Account › Security
In Account › Security › Single sign-on, enter your company email domain and choose Google Workspace or Microsoft Entra ID.
- 2
Verify It with DNS
Add the TXT record Searvia shows to your domain's DNS, then click Verify. DNS changes can take up to an hour.
- 3
For Microsoft, Add the Tenant ID
Copy the Directory (tenant) ID from Microsoft Entra admin center › Overview and save it, so only your organization's accounts are accepted.
- 4
Sign in Once, Then Require It
Sign out and sign in with the provider yourself, then turn on Require single sign-on.
What You Get
People with your company email can only sign in with their work account; when it is disabled, their Searvia access ends too.
- Password sign-in, other sign-in buttons and new password sign-ups are blocked for the domain. Free email domains such as gmail.com cannot be used. Sessions already open stay until they end.
Troubleshooting and Questions
- How do people sign in?
- On the login page they enter their work email and click Sign in with SSO, or use the Google or Microsoft button.
- Someone is locked out. What now?
- An owner or admin can turn off Require single sign-on for the domain at any time; password sign-in works again right away.