Setting up Single Sign On

Overview

Single Sign-on (SSO) allows you to login to Walnut and other applications with your existing account information from Google, Microsoft, Okta or many others. Setting up SSO allows you to configure an SSO connection for your company. If the SSO section is disabled, it may not be included in your contract, contact your CSM if it appears grayed out in Company Settings. If the SSO section is disabled, contact your CSM. To complete this process, you will need access to your company’s SSO portal. If you’re ready to get started setting up SSO, follow the steps below.

Instructions

1. To begin the process, navigate to the company settings page and scroll to the SSO section, or click the link in the sidebar to jump to the SSO section.
2. To begin the process, you’ll need to choose your SSO provider. We support custom SAML and OpenID connections as well as most providers, including Okta and Azure AD. See the full list of supported providers here.
3. Complete the instructions that follow and test your connection.
   Important: Make sure you provision any existing Walnut users through your SSO provider before you complete the process, otherwise they will lose their ability to log into Walnut with their username and password.

FAQs

How do I turn off this feature?

To disable the feature, simply toggle it off. By doing so, your employees will no longer be redirected to the SSO page and they can log in manually instead. However, the SSO connection will remain and can enable it again whenever you wish without going through the steps to configure it again.

To remove the connection completely, click the “X” button.
Important: if you remove the connection, you will have to go through the process again to set up SSO.

Can I change providers after configuring a connection?

Yes, you can change providers after you configure a connection.

Can I add multiple SSO providers?

Multiple SSO providers are not currently supported.

Is user provisioning supported?

Provisioning is not currently supported but this feature is coming soon.

Will employees still be able to log in via Google after SSO is set up?

Yes, they will still be able to log in via Google. If you need to disable that option,  please contact us.