Enable or disable SSO for specific users

After you enable single sign-on (SSO) for your company, you can individually require users to use SSO when logging into Intacct. After SSO is set up for a user, the user will no longer be able to use a password to log in directly. Instead, that user will need to use SSO to be authenticated by your SSO identity provider as an authorized user of Intacct.

Limitations: To use SSO, users must log in from a computer that has access to your SSO system. In addition, we currently don't support SSO login from mobile devices.

Enable SSO for a specific user

1. Go to Company > Admin > Users, roles, and groups> Users.
2. Select Edit beside a user record.

3. On the User Information page, select the Single sign-on tab.

4. Select Enable single sign-on for this user.

5. Enter the Federated SSO user ID that your SSO identity provider uses to identify this particular user.

6. Select the Test single sign-on button.

   • Successful logins are confirmed with the message "SSO test was successful."

   • If an error is encountered, you'll receive additional information about the type of error. Learn about SSO troubleshooting.

7. Select Save.

8. In the Verify your identity window, enter your account Password.

Disable SSO for a specific user

If you disable SSO for a user, the user will return to logging into your company from the Intacct login page.

1. Go to Company > Admin > Users, roles, and groups > Users.
2. Select Edit beside a user record.

3. On the User Information page, select the Single sign-on tab.

4. Deselect Enable single sign-on for this user.

5. Select Save.

6. In the Verify your identity window, enter your account Password.