Single sign-on with SAML

Your team signs in to Trove through your company's identity provider.

  • Sign in to Trove with Entra ID, Okta or Google Workspace
  • SAML 2.0 and OIDC
  • Access ends when someone leaves
Book a demo Compare plans
  • Microsoft Entra ID
  • Okta
  • Google Workspace
  • Any SAML or OIDC provider

How single sign-on works in Trove

  1. 1

    Sign in with your company's identity provider

    Connect Trove to Microsoft Entra ID, Okta, Google Workspace or any other provider that supports SAML 2.0 or OIDC.

    The Trove sign-in screen with a Sign in button and SSO enabled

  2. 2

    Access managed in one place

    Your IT team controls who can get into Trove from the identity provider they already run, so there's no separate list of Trove logins to keep track of.

    An identity provider admin console listing the people assigned to Trove, with one leaver removed

  3. 3

    Works with your roles and permissions

    Single sign-on decides who can get in. Roles and permissions in Trove decide what each person can do once they're there, such as view-only access, sending emails or which entities they see.

    Together, they give your security team the control they expect from any finance system.

    Trove team settings with single sign-on on and a role for each person

Resources on single sign-on and SAML

Single sign-on and SAML: common questions

Everything you need to know

Does Trove support single sign-on?

Yes. SAML and OIDC single sign-on is on the Advanced plan. Your team signs in to Trove through your company's identity provider.

Which identity providers does Trove work with?

Microsoft Entra ID (formerly Azure AD), Okta and Google Workspace, plus any other provider that supports SAML 2.0 or OIDC.

Can I sign in with my Google or Microsoft account without SSO?

Yes. Anyone on any Trove plan can sign in with their Google or Microsoft account. SAML single sign-on through your company's identity provider is on the Advanced plan.

What happens when someone leaves the company?

Remove them in your identity provider and they can no longer sign in to Trove.

Do roles and permissions still apply with single sign-on?

Yes. Single sign-on controls who can sign in, and roles and permissions in Trove control what each person can do.

Related features

See it working on your own customers

See single sign-on and SAML in action.

Single sign-on is included on the Advanced plan.

Book a demo Compare plans

Last updated