Skip to main content

How to Configure SSO for Your Organization

Learn how to set up SSO for your team using Okta, Azure, Google Workspace, or any other major identity provider.

A
Written by Allan Guo
Updated over 3 weeks ago

What You Need Before You Start

To configure SSO, you need:

  • Admin access to your identity provider
    (Okta, Azure AD, Google Workspace, OneLogin, etc.)

  • Admin or Owner access to your Willow team

  • An Enterprise Plan (SSO is only available for Enterprise)


Step 1: Open the Enterprise Controls

  1. Sign in with your Willow admin account

  2. Go to Enterprise / Data Controls

  3. Scroll to the bottom and select Manage SSO Settings

This is where you’ll start the setup flow. We've partnered with WorkOS to simplify your SSO experience.

Step 2: Choose Your Identity Provider

Click Set Up SSO and select your identity provider. You’ll be guided through the setup using WorkOS. There is no need to manually enter or upload metadata - simply follow the guided steps.

Step 3: Complete the Guided SAML Setup

WorkOS walks you through each step:

  • Creating a SAML app in your identity provider

  • Assigning the app to your users

  • Verifying your configuration

Just follow the instructions in the wizard.

Step 4: Perform the Test Authentication

At the end of setup, you’ll be asked to perform a test authentication. This step is required. SSO will not activate until the test succeeds.

Note: New SAML apps sometimes take 15 to 20 minutes to propagate. If your test fails, wait a bit and try again. You can press Refresh in the setup flow to retry the test.

Step 5: Enforce SSO (Optional)

If you want all team members to be required to log in with SSO:

  1. Go back to Enterprise / Data Controls

  2. Scroll to the bottom

  3. Turn on Enforce SSO

Once enabled, all users must sign in through your identity provider.


Common Issues & How to Fix Them

1. Firewall restrictions

Some company firewalls block redirects after login.
If users get stuck on the login screen, check your firewall rules and allow redirects back to Willow.

2. VPN interference

Certain VPNs can block or break SSO authentication flows. If this happens, temporarily turn off your VPN and try again.


If you need help configuring SSO or troubleshooting an issue, reach out to us at [email protected] and we’ll help you get things running smoothly.

Did this answer your question?