Single Sign-On (SSO) allows you to log into OnBoard using your organization’s identity provider (IdP) credentials. This guide explains how to sign in when SSO is enforced or optional, and how it works on mobile devices.

What is Single Sign-On (SSO)?

SSO is a secure authentication method that lets you use one set of credentials (from your organization’s identity provider) to access multiple applications, including OnBoard.

Signing In When SSO Is Enforced

If your organization requires SSO:

1. Activate Your Account First
   • New users must activate their account before signing in.
   • Follow the steps in the Accepting Your OnBoard Invitation article.
2. Sign In on the OnBoard Sign-In Page
   • Enter your email address and select Continue.

   • If SSO is enforced, it will be the only sign-in option available.

     
     

   • Click the SSO button:
     • If you’re already logged into your identity provider, you’ll be signed in instantly.
     • Otherwise, you’ll be prompted to enter your SSO credentials.
       
3. Accessing Multiple Organizations
   • If you belong to multiple organizations:
     • You can still use your email and password for OnBoard.
     • However, to access an organization that enforces SSO, you must sign in with SSO from the Organization Selection screen.

Signing In When SSO Is Not Enforced

If your organization does not enforce SSO:

• After entering your email, you can choose:
  • Sign in with OnBoard ID (email and password), or
  • Sign in with SSO.

Signing In on Mobile or Tablet Apps

The process is similar on iOS and Android apps. How you sign in depends on whether your OnBoard ID has the configured email domain used as the Single Sign-On (SSO) identifier.

Scenario 1: Signing In with a Configured Email Domain

1. Download the App
   • Install the OnBoard app from the App Store (iOS) or Google Play (Android).
2. Activate Your Account
   • Follow the steps in the Accepting Your OnBoard Invitation article to activate your account.
3. Sign In
   • Enter your email address.
   • Choose one of the following:
     • Next to sign in with SSO, or
     • Sign in with OnBoard ID and password.
       
   • Note: If you enter your OnBoard ID and password but SSO is enforced, you'll need to sign in via SSO from the Organization Selection screen.
     
4. Trust Your Device
   • After signing in, you’ll be asked to:
     • Trust the device.
     • Set a mobile security PIN or use biometrics (fingerprint or Face ID).
   • If trusted
     • You’ll stay signed in for up to 120 days of inactivity.
   • If you sign out
     • You’ll need to go through the SSO process again.

Scenario 2: Signing In Without a Configured Email Domain

You have two options.

Option 1: Use OnBoard ID and Password

1. Download the App
   • Install the OnBoard app from the App Store (iOS) or Google Play (Android).
2. Activate Your Account
   • Follow the steps in the Accepting Your OnBoard Invitation article.
3. Sign In
   • Enter your OnBoard ID and Password.
     
   • If SSO is enforced, you’ll need to sign in via SSO from the Organization Selection screen.
     
4. Trust Your Device
   • Trust Your Device
     • After signing in, you’ll be asked to:
       • Trust the device.
       • Set a mobile security PIN or use biometrics (fingerprint or Face ID).
     • If trusted
       • You’ll stay signed in for up to 120 days of inactivity.
     • If you sign out
       • You’ll need to go through the SSO process again.

Option 2: Sign in with a Linked Account

1. Download the App
   • Install the OnBoard app from the App Store (iOS) or Google Play (Android).
2. Activate Your Account
   • Follow the steps in the Accepting Your OnBoard Invitation article.
3. Sign In With a Linked Account
   • Select or Sign In With a Linked Account
   • Enter your Email Address and select Continue.

   • Choose your organization's SSO button and sign in with your IdP credentials.

     

4. Trust Your Device
   1. After signing in, you’ll be asked to:
      1. Trust the device.
      2. Set a mobile security PIN or use biometrics (fingerprint or Face ID).
   2. If trusted
      1. You’ll stay signed in for up to 120 days of inactivity.
   3. If you sign out
      1. You’ll need to go through the SSO process again.

Signing In from Your Identity Provider Dashboard

You can also sign in directly from your identity provider:

• Log into your SSO provider (e.g., OneLogin).
  
• Click the OnBoard application in the dashboard.
• You’ll be redirected into your OnBoard organization automatically.

Can I Use an Alternative Email for Notifications?

Yes, you can set up alternative email addresses for notifications if you prefer to have notifications sent to an email other than your OnBoard ID email:

• Administrators can add them to user profiles.
  • Review the steps in the Editing Another User's Profile article.
• Users can add their own in Profile and Settings.
  • Review the steps in the Managing Your User Profile and Settings article.

Important: These emails will not receive:

• Account invitation emails
• Password reset emails
• Calendar integration emails