--- title: "SSO with SAML for Enterprise-scale Security & Team Management" description: "Discover how SSO (single sign-on) to Netlify with SAML simplifies access control and member management across multiple teams for enterprise-scale security." source: "https://www.netlify.com/blog/sso-with-saml/" last_updated: "2026-07-10T20:43:16.000Z" --- Netlify cares about your company’s security and strives to provide you with the best methods to manage member access to your team. If you’re managing member access and configuring single sign-on (SSO) across multiple teams, then we have some exciting news for you. ## What is SAML SSO? SAML, or Security Assertion Markup Language, is an open standard used to transfer user authentication data between your identity provider (Okta, Google, Azure, Ping, etc) and the service provider (in this case, Netlify). Netlify supports SAML single sign-on to be configured for secure member access at the team level and now, for [Enterprise Grid](https://www.netlify.com/blog/2021/09/21/new-team-management-and-improved-invoicing-with-netlify-enterprise-grid-plan/) customers, at the organization level. ## Benefits of organization SSO with SAML Historically, in order to configure single sign-on for user authentication into Netlify, Owners of multiple teams would have to configure SSO for each team individually. This is a tedious, time-consuming process that introduces complexity and quality concerns. These risks are not desired when dealing with sensitive concerns such as team access management. ![Organization SSO status within Netlify](https://cdn.sanity.io/images/o0o2tn5x/production/1750d132f5ed963182373d57fd4f454b97e2851f-1999x1869.png?) With the addition of Organization SSO with SAML, Org Owners can now configure SSO for all of your teams in one place, reducing the time, overhead, and margin of error that accompanies these types of tasks. This also means that your identity provider administrators only need to configure one SAML app for all of your Netlify teams, further streamlining the process. ## Getting started with SSO with SAML for your organization We’ve teamed up with enterprise-readiness leaders WorkOS to leverage their expertise and resources in all-things authentication in order to provide a simple flow for configuring the SAML app for your Netlify organization. WorkOS manages integrations with over 20 identity providers and provides easy-to-follow, step-by-step guidance to get set up. ![Identity Provider selection in WorkOS](https://cdn.sanity.io/images/o0o2tn5x/production/cbb49891f7436f14446d0411b7be28492a02331f-1666x1270.png?) ![SAML app configuration wizard in WorkOS](https://cdn.sanity.io/images/o0o2tn5x/production/435a898fcd33411e2951ade1f926d8c44b4e3c67-1999x1460.png?) ![SAML configuration status in WorkOS](https://cdn.sanity.io/images/o0o2tn5x/production/ece6b295cc4de44e7fb1caf255f763f0dc2ffa28-1999x1487.png?) Once you configure your SAML single sign-on for your org, it will apply to all of your existing teams. Further, it will apply to every team you add to your organization in the future. Set it and forget it. ![SSO configuration at the team level](https://cdn.sanity.io/images/o0o2tn5x/production/0c4a7e7a0aa7d5755aad248fa8a9b3c7a9377fa3-1999x1434.png?) In addition to Netlify team access, your org-level SSO configuration can also be used for the [granular permission control of your protected sites and Deploy Previews](https://www.netlify.com/blog/granular-access-control-for-website-security/). ## The power of SAML SSO enforcement Once you have SSO configured at the org level, users within your SAML app can log in to your Netlify teams using their identity provider credentials. As an added layer of protection, you can also enforce your organization’s SSO configuration as the only method allowed to access these teams. ![Login type selection in Netlify](https://cdn.sanity.io/images/o0o2tn5x/production/887ad4baf037564888ecd21876b162008604fcb3-1999x1869.png?) With the Strict option set, all users must authenticate through your identity provider in order to access your Netlify teams. (NOTE: The Strict SSO Login type option is also available when configuring SSO at the team level. We recommend this setting be used regardless of where you configure your SAML single sign-on, as it is the most secure option.) ## SSO with SAML is only the beginning Organization SAML single sign-on is the first of many security, access control, and team member management features planned for our [Enterprise Grid plan](https://www.netlify.com/blog/2021/09/21/new-team-management-and-improved-invoicing-with-netlify-enterprise-grid-plan/). Soon, you’ll be able to granularly manage roles and specific team access via Identity Provider Directory Sync (SCIM), moving this complex process to a single, simple workflow. ![Sneak peek of the group mapping experience in Netlify](https://cdn.sanity.io/images/o0o2tn5x/production/236993442ce3b5bd1d23dc45ed6fba388b6db291-1999x1405.png?) We’re excited to provide you with these [security solutions](https://www.netlify.com/security/)! We would love to hear from you on any security, access management, and team member management challenges that your company faces. [Get in touch with us!](https://www.netlify.com/contact/) ### Share - [X (fka Twitter)](https://twitter.com/intent/tweet?text=Announcing SSO with SAML for Enterprise-scale Security&url=https://www.netlify.com/blog/sso-with-saml/) - [LinkedIn](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.netlify.com%2Fblog%2Fsso-with-saml%2F) - [Facebook](https://www.facebook.com/sharer.php?u=https://www.netlify.com/blog/sso-with-saml/) - [Bluesky](https://bsky.app/intent/compose?text=Announcing SSO with SAML for Enterprise-scale Security+https://www.netlify.com/blog/sso-with-saml/) * * * ### Tags - [Security](/blog/tags/security/) - [saml](/blog/tags/saml/) - [Authentication](/blog/tags/authentication/) ## Keep reading ![](/_astro/82dc1f6e5f1d68150dc29c3fc9900d4d52f99557-1200x675_Z1KP2qP.webp) News & Announcements February 22, 2023 [ ### Introducing More Granular Site Access Control for Improved Security ](/blog/granular-access-control-for-website-security) - ![Profile picture of Phil Hawksworth](/_astro/9cfe2bbe94bcb555ce3ac7683ac7905ad3fd32b1-400x400_Z18H6R1.webp) Phil Hawksworth ![](/_astro/eb275ddb9290b947ba4c53ac30538c77b44edae9-720x405_1y2MXK.webp) News & Announcements June 25, 2026 [ ### Netlify Functions, designed for Agent Experience ](/blog/netlify-functions-designed-for-agent-experience) - ![Profile picture of Eduardo Bouças](/_astro/52958f21e8450baf6d8e60302341a984e220c0cd-512x512_13VDlu.webp) Eduardo Bouças ## Recent posts News & Announcements June 25, 2026 [ ### Netlify Functions, designed for Agent Experience ](/blog/netlify-functions-designed-for-agent-experience) - ![Profile picture of Eduardo Bouças](/_astro/52958f21e8450baf6d8e60302341a984e220c0cd-512x512_13VDlu.webp) Eduardo Bouças News & Announcements June 24, 2026 [ ### How we measure Netlify’s Agent Experience ](/blog/how-we-measure-netlify-agent-experience) - ![Profile picture of Sean Roberts](/_astro/bbf2243f8171dbddd80ab2103622106cef84d125-512x512_Z1d2LKE.webp) Sean Roberts Guides & Tutorials May 15, 2026 [ ### How to build a real-time AI chatbot in minutes with Netlify Agent Runners (no backend) ](/blog/how-to-build-a-real-time-ai-chatbot-in-minutes-with-netlify-agent-runners-no-backend) - ![Profile picture of Nahrin Jalal](/_astro/f0e7c8f227a03fe58340c99ef5439d5a896c0733-272x272_Z23kDpD.webp) Nahrin Jalal ![](/_astro/3f255b372fa958df35802666ee33b4609b2d71bd-1200x1586_1VtE2D.webp) ### How do the best dev and marketing teams work together? [Access the report](https://www.netlify.com/reports/2024-leadership-trend-report/access/)