Incredify

Single sign-on

SAML 2.0 against your institution's identity provider. Enterprise plan, configured by us.

Enterprise only, and set up for you

SSO is not self-serve — there is no SSO panel in your Settings. Email hello@incredify.net and we'll configure it with your identity team, usually within a business day.

Incredify supports SAML 2.0 as a service provider, and works with Okta, Microsoft Entra ID (Azure AD), Shibboleth, Google Workspace, and any conformant IdP.

What we need from you

Your IdP metadata URL
The published SAML metadata endpoint for your identity provider. One URL — we read your entity ID, sign-in endpoint, and signing certificates from it, and pick up certificate rotations automatically.
Your email domains
Which domains should route to SSO — example.edu, and any others your staff use. Anyone signing in with an address at these domains goes to your IdP instead of receiving a code.

What we give you

Once configured, we send you the three values your identity team needs to register Incredify as a service provider:

  • SP Entity ID — how Incredify identifies itself to your IdP.
  • ACS URL (Assertion Consumer Service) — where your IdP posts the assertion after authentication.
  • SP metadata URL — all of the above as an XML document, if your IdP prefers to import rather than be configured by hand.

How it behaves once live

  1. 1A user goes to incredify.net/login and enters their institutional address.
  2. 2We recognize the domain as SSO-enrolled and redirect to your identity provider.
  3. 3They authenticate however your institution requires, including MFA.
  4. 4Your IdP posts the assertion back and they land in the dashboard.

SSO authenticates; it does not create memberships

Signing in through your IdP doesn't by itself grant access to your organization's badges. Members still have to be added under Settings → Members, which is what assigns the role and any sub-organization. Just-in-time provisioning isn't supported today. See Settings, members, and roles.

Anyone whose address isn't at an enrolled domain — an external partner, say — continues to sign in with a six-digit code.

Related

Signing inPasswordless sign-in with a six-digit code, and what happens if your institution uses SSO.Settings, members, and rolesEvery panel in Settings, plus how to add colleagues and what each role can do.Plans and billingWhat each plan includes, how the annual limit is counted, and managing your subscription.

Still stuck?

Email us at hello@incredify.net — a human will answer.