Skip to content

SSO

View as Markdown

Organization SSO (Single Sign-On) lets collaborative organizations sign members in through an OpenID Connect identity provider. Members authenticate with that provider, and Daytona creates or links their account and joins them to the organization with the roles you configure.

You register the provider once, share an organization SSO link with members, and Daytona handles provisioning, membership, and confirmation. Supported identity providers include Google Workspace, Microsoft Entra ID, Okta, Auth0, Keycloak, OneLogin, and any OIDC-compliant identity provider. Existing Daytona logins keep working alongside organization SSO.

Managing identity providers requires the SSO management permission. Members with the admin or sso-admin role can open the SSO page. See roles.