Single sign-on (SAML)

With single sign-on, people at your company sign in to JinkoUp with their work account. Admins on any paid plan can set it up in Settings → Single sign-on.

Set it up

1. 1In Settings → Single sign-on, choose your identity provider: Google Workspace, Microsoft Entra ID, Okta or Other (SAML 2.0).
2. 2In your identity provider, create a SAML app with the Entity ID and ACS URL shown in step 1, and send the person's email address as the Name ID.
3. 3Add your email domain (for example acme.com) and add the TXT record shown at your DNS provider. Click Check DNS until it says Verified.
4. 4Paste your identity provider's metadata URL (Microsoft, Okta) or metadata XML (Google) in step 3.
5. 5Click Save single sign-on.

People then choose Sign in with single sign-on (SSO) on the sign-in page and enter their work email.

What happens on the first SSO sign-in

• Someone who already has a JinkoUp account with that email keeps it: their projects, tasks and workspaces are all there.
• With Add people to this workspace on their first SSO sign-in on, new people join your workspace as members (your plan's seats still apply).

Require single sign-on

Turn on Require single sign-on to make members with an email at your domains use SSO for this workspace. Other members (for example contractors with their own email) aren't affected. To avoid locking yourself out, sign in with SSO yourself before you turn it on.