Prerequisites

Before beginning the SSO setup process, ensure you have:

Important: The person initiating SSO setup should have both Admin permissions in the MarketScale channel and administrative access to your organization's identity provider. If you're a MarketScale channel admin but don't manage your company's identity provider (Okta, Azure AD, etc.), coordinate with your IT team first. They'll need to be the one completing the configuration in the setup portal.

As per industry-standard practices and compliance requirements, your organization is responsible for:

Note: Single sign-on is available for Business and Enterprise subscriptions.

Setup Process

Follow this step-by-step guide to configure SSO for your channel.

Step 1: Confirm You Have the Right Access

You'll need two things before starting:

If you have MarketScale Admin access but not identity provider access, loop in your IT administrator before proceeding. They'll need to complete the identity provider configuration in the setup portal. For more detail on who needs what access and how to coordinate, see Admin Role Requirements for SSO Setup.

Step 2: Request SSO Setup

Let us know you'd like to set up SSO for your organization. We'll verify that your account has the right permissions and that your channel is on an eligible plan, then provide you with a personalized setup portal link.

Step 3: Configure Your Identity Provider

Using the setup portal link we provide, you will:

Important: The initial link we provide expires in 5 minutes, so click through promptly. Once you are inside the portal, your session will remain active while you complete configuration. We recommend bookmarking the portal at this point. You can return to it at any time to update your SSO settings, enable directory sync, adjust login policies, or make other changes without needing a new link from us.

Step 4: Verification and Activation

Common Issues and Troubleshooting

Below are some common issues you may encounter. For a more comprehensive list including login issues, directory sync problems, and FAQ, see SSO Troubleshooting and FAQ.

Provider-Specific Resources

Each identity provider maintains detailed documentation for SSO integrations:

Support Limitations

Please note that while we provide guidance for SSO setup, the configuration within your identity provider is your organization's responsibility. For issues specific to your identity provider configuration, please contact your provider's support team.

If you encounter issues with the MarketScale side of the integration, let us know and include details of the problem and any error messages you're receiving.

Frequently Asked Questions

Q: Can we use multiple identity providers?
A: Currently, MarketScale supports one identity provider per organization.

Q: How long does the SSO setup process typically take?
A: Most organizations complete the setup within 1-2 hours, depending on their familiarity with SSO configurations.

Q: Can we test SSO before rolling it out to all users?
A: Yes, we recommend setting up a test user in your identity provider to verify the integration works correctly before full deployment.

Q: What authentication protocols do you support?
A: MarketScale supports SAML 2.0 and OpenID Connect (OIDC) protocols for SSO integration.

Q: Do you support Just-In-Time (JIT) user provisioning?
A: Yes, with directory sync enabled, new users can be automatically provisioned when they first attempt to access MarketScale via SSO.

Related articles:

Keep exploring