SAML Single Sign On

Enable Single Sign-On (SSO) in Fillout to streamline user authentication and access management. This article will guide you through the setup process to enable SSO through various providers like Okta, Azure AD, and all SAML providers.


  • Your account must have an Admin role in your team
Note: SAML is available on Filloutโ€™s Enterprise Plan, Tier 2.

Set up SSO

  1. Navigate to your Fillout Dashboard and click on Settings. Find the SSO section.
  1. Click on Configure SSO. You will be guided through the setup process.
  1. Provide the required information depending on your identity provider (IdP) such as Okta, Azure AD, etc.
  1. Save the changes.
At this point, you can set the default roles for newly provisioned users.

How to Log in Using SSO

Once SSO is configured, your team members can log in by clicking on Login with SSO on the Fillout login page and entering their company email.
notion image

How provisioning users works

Fillout does not currently auto-provision users when they are added to your SSO provider. Instead, an account in Fillout will be created when the user logs into Fillout for the first time, using the SSO login.

Enforcing SSO

Contact if you would like to enforce SSO for all users on your account.
By default, users added to your account before enabling SSO will still be able to authenticate with their prior authentication method (e.g. password or Google login). At your request, we can enforce SSO for all users going forward, including existing users. Existing users will still retain all their prior details once they login with SSO.
Important: You can only enforce SAML SSO for a team if your current session was authenticated with SAML SSO. This ensures that your configuration is working properly before tightening access to your team information, this prevents loss of access to the team.