How SSO Works in ChangeTower
With SSO enabled, your team members can use your company’s existing identity provider (IdP) to access ChangeTower. This means:
Centralized authentication and account management
Increased security through your organization’s IdP policies (MFA, password rotation, etc.)
A smoother login experience for your team
What You’ll Need
To get started, please provide our team with the following information from your Identity Provider (IdP):
Metadata file or URL containing your SAML configuration details (or equivalent for your IdP)
Entity ID
SSO login URL
X.509 certificate (for signing/encryption)
If you’re not sure how to retrieve this information, your IT administrator should be able to help.
How to Request Setup
Contact our support team at [email protected]
Include the required IdP details listed above.
Our team will configure SSO on your behalf.
Once setup is complete, we’ll share the necessary information for your IdP (ACS URL, Entity ID, etc.) and confirm everything is working.
Frequently Asked Questions
Q: Which plans support Single Sign-On?
At this time, SSO is only available to those subscribed to our Enterprise offering. Learn more about Enterprise here.
Q: Can we configure SSO ourselves?
Not yet. SSO setup must be handled by our team, but we’ll make sure the process is quick and secure.
Q: Which identity providers do you support?
We support all SAML 2.0 compliant identity providers (Okta, Azure AD, Google Workspace, OneLogin, etc.).
Q: How long does setup take?
Once we receive your IdP information, setup usually takes 1–2 business days.