Keepface
Sign up

SSO auto-enrollment (Google Workspace, Microsoft 365)

SSO auto-enrollment lets employees sign in to Keepface with their work account, no separate password, and lands them straight into your EA workspace.

When SSO matters

If your company already runs Google Workspace or Microsoft 365 as the identity provider for all internal tools, SSO removes the friction of “yet another login” and ensures every hire shows up in EA the moment they get a work email.

What you set up

  1. Workspace settings → Integrations → SSO
  2. Pick provider (Google / Microsoft / SAML 2.0 generic)
  3. Map your IDP to Keepface (admin steps in the IDP console)
  4. Choose domain auto-claim, anyone signing in with an email at @yourcompany.com is auto-enrolled as an Employee in your workspace

Domain claim

Keepface verifies you own the email domain via DNS TXT record. After verification, the auto-claim is exclusive, no other workspace can claim the same domain.

Status

SSO auto-enrollment is on the roadmap (W2.E4 in our internal tracker) but not yet shipped for self-serve setup. For enterprise pilots, contact your account manager.

Was this article helpful?