Skip to main content
Single Sign-On (SSO) is available for enterprise customers who want to authenticate users using their existing work accounts. With SSO enabled, authentication is delegated to your organization’s identity provider, reducing credential management overhead and improving security by centralizing authentication. VIVI does not store or manage your users’ passwords. All authentication is handled directly by your identity provider.

​
Supported Identity Providers

VIVI currently supports SSO with the following identity providers:

Okta

Active Directory Federation Services

Microsoft Entra ID

Google Workspace

Keycloak

PingFederate

​
How to Enable SSO

To enable SSO, contact the VIVI sales or support team and request SSO setup. You will receive a self-service setup link with step-by-step instructions to complete the configuration on your own. This approach ensures that VIVI never accesses or stores sensitive identity provider credentials or secrets.
SSO can be enabled even if users have previously signed in to VIVI using their work email. However, it is strongly recommended to configure SSO before users from your organization begin signing in, to ensure a consistent authentication experience.

​
Important Considerations

  • SSO does not migrate or synchronize existing users from your identity provider into VIVI. It only delegates authentication. A VIVI user profile is created after the user’s first successful SSO sign-in and the profile is updated on subsequent sign-ins.
  • Roles, permissions, and group memberships from your identity provider are not transferred to VIVI. Authentication (who you are) and authorization (what you can do) in VIVI are managed independently of your identity provider.
  • Users must still be invited to a VIVI account through the VIVI portal. If a user signs in with valid SSO credentials but has not been invited, a new standalone VIVI account will be created. See Users for more details.