Help Center · Account and Billing

Require Single Sign-on

Make everyone with your company email sign in through Google Workspace or Microsoft Entra ID.

About 5 minutes

What You Need

  • Studio Plan
  • Owner or Admin Role
  • Access to your domain's DNS settings
  1. 1

    Add Your Domain

    Account › Security

    In Account › Security › Single sign-on, enter your company email domain and choose Google Workspace or Microsoft Entra ID.

  2. 2

    Verify It with DNS

    Add the TXT record Searvia shows to your domain's DNS, then click Verify. DNS changes can take up to an hour.

  3. 3

    For Microsoft, Add the Tenant ID

    Copy the Directory (tenant) ID from Microsoft Entra admin center › Overview and save it, so only your organization's accounts are accepted.

  4. 4

    Sign in Once, Then Require It

    Sign out and sign in with the provider yourself, then turn on Require single sign-on.

What You Get

People with your company email can only sign in with their work account; when it is disabled, their Searvia access ends too.

  • Password sign-in, other sign-in buttons and new password sign-ups are blocked for the domain. Free email domains such as gmail.com cannot be used. Sessions already open stay until they end.

Troubleshooting and Questions

How do people sign in?
On the login page they enter their work email and click Sign in with SSO, or use the Google or Microsoft button.
Someone is locked out. What now?
An owner or admin can turn off Require single sign-on for the domain at any time; password sign-in works again right away.
Open Security