Set Up Enterprise Sign-In (SSO)
Set up a SAML-based single sign-on (SSO) option for your global GoTo account to provide a simplified sign-in experience for your users.
- You must have a GoTo product account.
- This is an advanced task typically performed by your IT Admin.
Step #1: Set up your organization
Domains within your organization are wholly-owned email domains. For example, in the email Joe@main.com, "main.com" is the email domain. Verifying the initial domain automatically creates your organization. You can also add more domains to verify, or delete any domains you no longer need listed.
Step #2: Configure an Identity Provider
- Microsoft Active Directory Federation Services (AD FS)
Active Directory Federation Services is a feature of the Windows Server operating system that extends user's Windows sign-on access to other applications outside the corporate network. You can configure AD FS to work as an Identity Provider for GoTo's products. Learn how to configure AD FS 2.0 or AD FS 3.0.
- Third-party Identity and Access Management Providers
Many third-party Identity and Access Management partners offer SSO as part of their feature set, including:
- Azure AD
- Okta
- OneLogin
- Active Directory Federated Services (AD FS) v2.0 | v3.0
- RSA
- SecureAuth version 6.0-7.5 | version 8.0 | version 8.1
- If your Identity Provider is not listed, proceed to the next step.
Step #3: Add your Identity Provider to the Organization Center
If your Identity Provider does not supply a metadata file, you will need to manually add your Identity Provider.
Step #4: Test your SSO setup
Step #5: Inform your users
(Optional) Request to enforce Enterprise Sign-In
If you are interested in enforcing enterprise sign-in as the only sign-in method available for your GoTo Resolve users, select the Contact Support option in this article for assistance.