Skip to main content

How to Set Up SSO Access for Your Team

This guide explains how to onboard users with Single Sign-On (SSO) after your SSO configuration has been completed by our team.

Updated over 2 months ago

SSO is available as an enterprise add-on and must be set up by BrandBastion’s dev team. Once configured, SSO enforces domain-based login for all authorized users.

🔐 How SSO Works on BrandBastion

Once enabled:

  • All users with your company domain (e.g., @yourbrand.com) must log in via SSO

  • Users with non-company domains can still log in with a standard username + password

  • Your team is responsible for managing users in both your SSO provider and the BrandBastion platform


1. Contact Us to Enable SSO

To get started:

  • Reach out to your BrandBastion Customer Success Manager

  • Our dev team will coordinate with you to configure SSO with your provider (Okta, OneLogin, PingID, etc.)


2. Add Users in BrandBastion

After setup, you must manually add SSO users via User Management:

  • Go to Settings > User Management

  • Click Add User

  • Enter the user’s name, email, and role

  • The new users will not receive an email invite — this only applies to standard (non-SSO) users

📌 Note: SSO users do not receive email invites. Their login access is controlled via your SSO provider.


3. Add Users in Your SSO Provider

Provision the same users on your SSO platform:

  • Ensure the email matches exactly what was entered in BrandBastion

  • Assign the appropriate access to the BrandBastion app

  • Note: Adding a user in your SSO alone will not grant access

Did this answer your question?