Authentication Methods
Social Sign-On
Google and Microsoft OAuth — Team members can sign in using their existing Google or Microsoft work accounts without creating a separate allGood password.SAML/SSO (Enterprise Only)
Single Sign-On — Available for Enterprise customers only. Works with identity providers like Okta, Microsoft Entra ID (formerly Azure AD), and other SAML-compatible systems. Users sign in through your company’s central authentication system. For SAML login, users need to enter their email address on the login screen to be routed to your organization’s SSO provider. Important: If your organization uses SAML/SSO, users will only get access when your IT team provisions them in your identity provider (like Okta or Microsoft Entra ID).SSO Setup
Prerequisites
- You, or someone from IT, who can configure SSO (SAML) and verify your domain (requires DNS changes).
- You will have received from allGood an admin setup link for SSO.
Should look likehttps://setup.allgoodhq.app/init?XXXXXXXXXX
Instructions
On opening the admin setup link there will be two flows to complete: (A) Domain Verification, and (B) SSO.A. Domain Verification
After clicking the setup link, the organization’s admin is prompted to enter the domain they wish to verify. If the domain is valid, we identify the DNS service provider and display custom setup instructions to follow.B. SSO
After selecting Configure Single Sign-On, choose your organization’s identity provider from the list. Once selected, complete the instructions as prompted and test SSO sign-in.Testing
Once you have completed both flows, you should be able to sign in atallgoodhq.app using your organization email address. You will be redirected to your organization’s sign-in page.
Frequently Asked Questions
How long does the SAML integration take to go live?
How long does the SAML integration take to go live?
Depending on your identity provider, the SAML login could take up to 24 hours to become live due to data propagation delays. Please check with your identity provider for details.
Does the domain verification and identity provider have to be valid?
Does the domain verification and identity provider have to be valid?
Yes. Since we only allow logins from the verified domain, ensure that both your IDP and domain are correctly configured.
How long can domain verification take?
How long can domain verification take?
Due to standard DNS propagation, this can take up to 4 hours, though most DNS providers complete it within a few minutes.