Overview
Single Sign-On (SSO) lets your team access Knak securely without managing separate passwords. Instead, users authenticate through your identity provider using the SAML 2.0 protocol.
Before You Begin
Ensure you have admin access to both Knak and your identity provider (IdP).
This guide outlines general SAML 2.0 setup. For provider-specific instructions, see:
Step-by-Step Setup
1. Access SSO Configuration in Knak
Go to the Admin panel.
Click Settings in the left-hand menu.
Scroll to the Login section.
Click Configure next to “Single Sign-On (SSO).”
2. Create an SSO Application in Your IdP
Use the setup information provided on the Knak SSO page to create a new SAML app in your IdP.
Set the Application Username Format to Email.
3. Enter IdP Details in Knak
After creating the app, locate the following in your IdP:
Identity Provider Single Sign-On URL
X.509 Certificate
Paste these values into the Knak SSO setup page.
4. Save and Enable SSO
Click Save.
A success message will appear.
Use the toggle to enable or disable SSO for your organization.
Additional Notes
All users must be added to Knak to gain access.
Once SSO is successfully set up, Knak can enable user creation without invites. Contact support for bulk user creation.
Both IdP-initiated and Service Provider-initiated login flows are supported.
If users have trouble logging in, verify their identity provider accounts are active and correctly configured.
Admins can choose whether users are required to log in via SSO or can also use a password. This can be adjusted in the Admin Settings under the Login tab. Toggle the Username and Password Login to Allow users to login using the Username and Password field on the Knak login page, toggle off to Force SSO Login for users.
Need more help? Contact support via live chat within Knak using the chat bubble in the bottom right corner or email support@knak.com