Single Sign-On (SSO)

What Is Single Sign-On?

Single Sign-On (SSO) allows you to log in to Easy Mail Archive using your organization's identity provider (IdP), such as Microsoft Entra ID, Google Workspace, or Okta. Instead of managing a separate password for Easy Mail Archive, you authenticate through the same system you already use for your other work applications.

SSO is available on the Business and Enterprise plans.

When SSO is configured for your organization, the login process is straightforward:

Go to your organization's login page (e.g. yourcompany.easymailarchive.com)
Click the Sign in with SSO button
You are redirected to your organization's identity provider
Authenticate using your corporate credentials (and any MFA your IdP requires)
You are automatically redirected back to Easy Mail Archive, fully logged in

The entire process typically takes just a few seconds if you are already signed in to your identity provider.

No Additional Two-Factor Authentication

When you log in via SSO, Easy Mail Archive does not require an additional two-factor authentication step. Your identity provider is responsible for verifying your identity, including any multi-factor authentication (MFA) policies configured there. This means you only need to complete MFA once at your IdP, not again at Easy Mail Archive.

Account Provisioning

When you log in via SSO for the first time, your Easy Mail Archive account is created automatically based on the information provided by your identity provider. This typically includes:

Your name
Your email address

Your administrator controls which users are allowed to access Easy Mail Archive through the identity provider's application assignments.

SSO Configuration

SSO is configured by your organization's administrator, not by individual users. If you would like SSO to be enabled for your organization, contact your administrator. They can set it up under Admin > Security using the OIDC (OpenID Connect) protocol.

The administrator will need:

The identity provider's discovery URL or issuer URL
A client ID and client secret from the IdP
To configure the redirect URI in the identity provider

Logging In Without SSO

Even when SSO is configured, password-based login and email code login may still be available depending on your administrator's security settings. However, some organizations choose to enforce SSO-only login, which disables other login methods.

Troubleshooting

If you have trouble logging in with SSO:

Ensure you are using the correct organization URL (e.g. yourcompany.easymailarchive.com)
Check that your corporate account has been granted access to the Easy Mail Archive application in your identity provider
Contact your IT administrator if you receive an error during the SSO process
Clear your browser cookies and try again if you experience redirect issues