The Authentication & SSO tab in your Team admin panel lets you control how people sign in to your team's subdomain. You can customize the login page, choose which sign-in methods are available, and, for Enterprise teams, configure Single Sign-On (SSO).
Prerequisite
You need a team subdomain to configure authentication. If you haven't set one up yet, you'll be prompted to do so.
The tab has two sections: Login methods and SSO.
Login methods
Login URL
Your Login URL is the address of your team portal's sign-in page. Share this link with members so they can sign in on your subdomain (for example, mycompany.start.me).
Login background
Upload a custom background image for your sign-in and sign-up pages. Use this for additional branding, such as a photo, pattern, or brand colors, alongside your team logo and subdomain favicon.
Login methods
Toggle which sign-in methods are available on your subdomain:
Email: Allow members to sign in with their email address and password.
Social logins: Enable or disable third-party login providers such as Google, Microsoft, Apple, and others. Only providers that are enabled appear on your subdomain's sign-in page.
Single Sign-On (SSO)
The SSO tab is available for Enterprise teams. It lets you connect SAML2-based identity providers (Okta, Azure AD, OneLogin, and others) so members can log in with their existing work credentials. For setup instructions and configuration details, see Configure SSO/SAML on Start.me.