Skip to main content

​
Prerequisites

  • You’ll need an IT administrator who can configure a SAML SSO connection to your identity provider, and/or modify DNS records to verify ownership of your domain.
  • You’ll need to reach out to your allGood support team for an admin setup link for SSO.
    It should begin with: https://setup.allgoodhq.app/init?
Image

The admin portal will lead you through two setup flows: one for domain verification, and one to configure SAML SSO.

​
Domain Verification

1

Open the "Verify your Domain" flow in the setup portal.

2

Enter your organization's domain name.

If your org uses multiple domains, enter the domain name that can be found after the @ in your email address.
Image

Enter the domain that your organization uses for email.

3

Follow the instructions onscreen.

The admin portal will identfy your DNS provider based on the domain you supply, and will give you detailed instructions on how to add a DNS record verifying your ownership of that domain in allGood.

​
SSO Setup

1

Open the "Configure Single Sign-On" flow in the setup portal.

2

Find your identity provider in the list and select it.

If you don’t see your particular IdP in the list of options, you can continue with “Custom SAML” or “Custom OIDC” at the bottom of the screen.
Image

Find your IdP in the list, and select it.

3

Follow the instructions onscreen.

The admin portal will give you specific, step-by-step instructions on how to configure SSO to allGood from your IdP.

​
Testing SSO

Once you have completed the domain verification and set up SSO, you’ll be able to sign in to allgoodhq.app with an email address from your organization.
Clean Shot 2026 03 04 At 17 29 00@2x

Enter an email from your org in the "Email" box, and click "Continue".

This will redirect you to your organization’s sign-in page.

​
Frequently Asked Questions

Depending on your identity provider, there might be a delay in propagating the relevant data and the SAML login could take up to 24 hours to become live. Please check with your Identity Provider for details.
Yes, since we only allow logins from the domain you have verified, please make sure that your IDP and Domain are both correctly configured. If you’re experiencing issues verifying your domain, reach out to allGood support—we can verify it manually if the DNS approach won’t work in your environment.
Due to standard DNS propagation, this process can also take up to 4 hours, however, with most DNS providers, this should likely only be a few minutes.
Image

The admin portal will keep checking your DNS records for however long the changes take to propagate.