Single sign-on and automatic user provisioning

Last updated 2 October 2026

← Help centre · Admin and security

Let people sign in with your company’s identity provider.

On higher plans the Owner can connect an identity provider that supports SAML (such as Okta or Microsoft Entra) under Admin, then Single sign-on. You can require single sign-on for everyone except the Owner.

• Copy our details into your identity provider, and paste its details back into the Single sign-on page.
• Automatic user provisioning (SCIM) lets your identity provider create and deactivate people for you. Make a provisioning token on the same page and give it to your provider.
• The Owner can always sign in with a password, so a mistake in the setup cannot lock you out.

Related

• Devices and sign-in policy
• Two-step sign-in
• Data protection rules
• Deleted messages and how long messages are kept

Was this not what you needed? Email support@intercomchat.com and tell us what you were trying to do.

Xypno Business Solutions Ltd. Questions? Email support@intercomchat.com.