Skip to main content
Available on: the Enterprise planFind it in: Settings in the organization name menu at the top left of the screen > Organization > Enterprise SetupRequired role: Admin or custom
Enterprise Single Sign-On (SSO) lets users sign in with their corporate identity provider (IdP) credentials, such as Microsoft Entra ID, Okta, or Google Workspace. Profound keeps their user data synchronized with the IdP.

​
Supported protocols

Profound supports multiple protocols for enterprise SSO, including Security Assertion Markup Language (SAML) and OpenID Connect (OIDC). Setup is tailored to your IdP, and custom SAML and OIDC connections are available if your provider isn’t among the commonly supported options.

​
Domain matching and subdomain support

Authenticating with SSO requires the user’s email domain to match the exact domain the connection is configured with. For example, a user with the email address john-smith@tryprofound.com can use SSO only with the tryprofound.com domain. Subdomains (like dev.tryprofound.com) cannot use the same SSO connection as root domains (like tryprofound.com), so each subdomain needs its own connection. Profound uses your verified domains to confirm that a user signing in belongs to your organization. Learn more about verifying domains in the Configure SSO guide.

​
SSO scope

SSO is configured per Profound organization. If your company operates multiple Profound organizations, each one needs its own SSO connection. If your organizations share members, such as agency or contractor accounts, or have an otherwise non-standard configuration, contact your Engagement Manager for setup assistance.

​
SSO and Directory Sync

SSO lets your IdP handle how users sign in. To also let it control who has access, with users provisioned and deprovisioned automatically, set up Directory Sync. The features are independent: enable either one or both.

​
Getting started

Follow the Configure SSO guide to set up SSO for your organization. If you need help, contact customer support.