Single Sign-On (SSO)
      Back to home
      1. Help Center - MASV
      2. Teams and User Management
      3. Single Sign-On (SSO)

      Getting Started with Single Sign-On (SSO)

      MASV supports Single Sign-On ( SSO ) with SAML-based authentication. A MASV team owner can configure a SAML-enabled Identity Provider (such as Okta, Azure AD, PingOne ) to provide user management and service authentication for MASV.

      Note:

      • After SSO is enabled for a MASV Team, all its admins and members must sign in with SSO. Only the Team Owner can sign in with an alternative method (Sign in with Google; or email/password combination).
      • All MASV Admins and Members must use an email with a domain that is verified by MASV. For example, an SSO-enabled team is verified for company.com, and its MASV users must have an email such as employee@company.com configured in the Identity Provider.
      • SSO-enabled MASV Team Admins and Members cannot change their password, use their old sign in method, or change their email in MASV. This is handled by the Identity Provider.
      • Sign in with SSO is enforced for users even if they want to access a different MASV Team that is not SSO-enabled. After signing in with SSO, the user can see all the MASV Teams that they belong to, as usual, and switch between Teams.
      • A unique SSO Name is used by each SSO-enabled Team. All users will need to know their SSO Name to sign in with SSO.
      • SCIM is not currently supported by MASV.
        • New users are onboarded with Member role. The MASV Team Owner can manually promote a user to Admin role in MASV Web App (Features & Settings > User Management).
        • Automatic offboarding of users is not supported. In other words, removing a user’s MASV access in the Identity Provider will prevent them from signing in to MASV, but that account still appears and if active, remains so until timeout or log out. It is recommended that the MASV Team Owner or an Admin manually remove a user from the User Management page in the MASV Web App to bar access immediately.

      How to set up SSO as Team Owner

      There are two main steps to set up SSO for MASV:

      1. Domain Verification
      2. Configuring the Identity Provider

      NOTE: After setting up SSO, notify your MASV Team members of your company’s SSO name. They will need it when they sign in with SSO.

      How to sign in to MASV by using SSO (first time)

      1. At the MASV sign in page ( or from the MASV Desktop App ), select Sign in with SSO.
        Web app sign in
        Desktop app sign in
      2. Enter your company’s SSO Name. Your MASV Owner / SSO Admin will provide this.
        SSO name
      3. If redirected to your Identity Provider, enter your credentials.
      4. You will receive an email to join the MASV Team. Open the email and select Join Now.
        Join team SSO

      5. Return to the MASV sign in page, and select Sign in with SSO.
      6. Enter your SSO Name.

      You will now have user access to the MASV Web App and MASV Desktop App.