--- title: "Adding or Inviting Enterprise SSO users - Document360" slug: "inviting-or-adding-sso-users" description: "After successfully configuring the Enterprise SSO with your project, you can start inviting previously added users or adding new users as SSO users.It is almost similar to, with just one variation." tags: ["SSO"] updated: 2026-07-24T08:32:59Z published: 2026-07-24T08:32:59Z canonical: "docs.document360.com/inviting-or-adding-sso-users" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.document360.com/llms.txt > Use this file to discover all available pages before exploring further. # Inviting or Adding SSO users Once you have configured Single Sign-On (SSO) using SAML or OpenID Connect for your project, you can start adding and managing SSO users. Users added as SSO users authenticate using their existing credentials from a trusted Identity Provider (IdP) such as Okta, Azure AD, or Google Workspace, without needing a separate Document360 password. This article covers how to add new SSO users, invite existing users to switch to SSO, and remove SSO user accounts when they are no longer needed. --- ## Before you begin - SSO must already be configured for your project using SAML or OpenID Connect. - You must have the **Owner** or **Admin** project role to add or invite users. - The email address of any new SSO user must match the domain specified in the SSO configuration. --- ## How to add and manage SSO users Choose the action that applies to your situation: Add a new SSO user New to your project? Add them directly as an SSO user so they authenticate using their IdP credentials from day one. [Go to steps →](/docs/inviting-or-adding-sso-users#how-to-add-a-new-user-as-an-sso-user) Invite an existing user to SSO Already added to the project with a standard account? Invite them to switch to SSO authentication through the SSO configuration settings. [Go to steps →](/docs/inviting-or-adding-sso-users#how-to-invite-an-existing-user-to-use-sso) --- ## How to add a new user as an SSO user Adding a new SSO user follows the same process as adding a standard user in Document360, with one additional step to assign the SSO configuration. 1. Navigate to **Settings** () in the left navigation bar of the Knowledge base portal. 2. In the left navigation pane, go to **Users & permissions** > **Users & groups**. 3. In the **Users** tab, click **Add** > **Users**. 4. In the **New user** window, under **Basic details**, enter the email address of the user in the **Email** field. NOTE The email address must match the domain specified in the SSO configuration. 1. Select the **SSO user** checkbox. 2. In the **Select SSO** dropdown, select the SSO configuration you want to assign to the user. 3. If you do not want to send an invitation email, select the **Skip invitation email** checkbox. 4. Click **Save**. The user is added as an SSO user and will receive an invitation email with their login details. To know more read [Add new user](https://docs.document360.com/docs/add-new-user). --- ## How to invite an existing user to use SSO If users have already been added to your project with standard Document360 accounts, you can invite them to switch to SSO authentication through the SSO configuration settings. 1. Navigate to **Settings** () in the left navigation bar of the Knowledge base portal. 2. In the left navigation pane, go to **Users & permissions** > **SSO Configuration**. 3. Hover over the SSO configuration you want to use and click the **Edit** () icon. 4. In the SSO configuration window, navigate to the **More settings** tab. 5. In the **Convert existing user and reader accounts to SSO** section, select one of the following options: - **All users**: Invites all users currently added to the project. - **Selected users only**: Opens a list of users in the project. Select the checkbox next to each user you want to invite. 6. Click **Save**. ![SSO configuration settings for managing user accounts and permissions in Okta.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/Screenshot-SSO_configuration_more_settings.png) Each invited user will receive an invitation email with their SSO login details. ![Sample SSO invitation email sent to users.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/2_Screenshot-Invitation_email_sample.png) NOTE When you invite an existing user to become an SSO user, an additional SSO user account is created. The original account will continue to exist alongside the new SSO account. If the SSO account is no longer needed, you can delete it separately without affecting the original account. --- ## How to delete an SSO user If an SSO user account is no longer required, you can remove it from the **Users & groups** page. 1. Navigate to **Settings** () in the left navigation bar of the Knowledge base portal. 2. In the left navigation pane, go to **Users & permissions** > **Users & groups**. 3. Hover over the SSO user you want to delete. SSO users are identified by the **SSO** label next to their email address. 4. Click the **Delete** () icon. 5. Click **Yes** in the delete confirmation popup. NOTE If an email address exists as both a standard user account and an SSO user account, deleting the SSO account will not delete the standard user account. ![User management interface displaying user roles, statuses, and options for account actions.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/Screenshot-Delete_sso_user.png) To know more, read [Deactivate or delete user](https://docs.document360.com/docs/managing-team-account). --- ## Best practices - When inviting existing users to SSO, use **Selected users only** rather than **All users** if your project has a mix of SSO and non-SSO users. This avoids unintentionally converting accounts that should remain on standard login. - After inviting users to SSO, confirm with them that they can log in successfully before removing their original accounts. - Use the **SSO** label in the Users & groups page to quickly distinguish SSO accounts from standard accounts when managing a large user list. --- ## FAQ **Why am I not able to create an SSO reader account?** If a user has already been added to the project as an SSO reader account, you cannot add the same user again. The **Create reader account** button is disabled automatically when the **SSO user** checkbox is selected.