SSO guides

How-to guides for configuring SSO authentication.

Enforce SSO authentication

Learn how to disable Retool's standard authentication and require SSO authentication.

Sync SAML group memberships

Learn how to sync and map SAML group memberships from your IdP to Retool.

Migrate from SAML to OIDC

Learn how to migrate your SSO configuration from SAML to OIDC.

Provision users with SCIM

Learn how to implement SCIM user provisioning with Okta or Microsoft Entra ID.

Configure session duration

Learn how to toggle between short and long SSO session times.

Enable JIT user provisioning

Learn how to enable JIT user provisioning for SSO.

Restrict domains

Learn how to restrict SSO authentication to a list of approved domains.

Trigger authentication automatically

Learn how to automatically trigger SSO authentication when a user navigates to your organization.