❗Important

You must be an Admin to set up single sign-on (SSO) for your team.


Set up the connection with your Identity Provider

To get started, you’ll need to set up a connection for Guru SSO (also known as a connector) with an Identity Provider (IdP). To build the connection in the IdP, you'll need some information from the SSO/SCIM integration page in Guru.

To access the SSO/SCIM integration page in Guru's web app:

1. Navigate to Team Settings.

2. Select Apps and Integrations.

3. Choose SSO/SCIM.

Things Guru's SSO Integrations page provides

Things you'll need from your IDP

Your Guru Team ID

IdP Issuer

Guru Single Sign-On URL

IdP Single Sign-On URL

Audience URI

X.509 Certificate

Here is a list of Identity Providers we've worked with in the past:


✍️ Note

Guru integrates with any third-party Identity Provider that supports SAML 2.0. You can also integrate Google Workspace using SAML-based SSO.


Set up SSO in Guru

Now that you've entered and gathered the necessary information from your IdP, an Admin on your team can enable SSO by filling in the required information on your team's SSO/SCIM page.

Setting up SSO in Guru

1. Navigate to Team Settings.

2. Select Apps and Integrations.

3. Choose SSO/SCIM.

4. Fill in all the required fields with the information you gathered from your IDP:

  • Identity Provider Single-Sign on URL

  • Identity Provider Issuer

  • X.509 Certificate

5. Choose your Provision Type:

  • Automatically add users. Guru will add the user to the team the first time they log in via SSO.

  • Require users to be invited. You must explicitly invite users to your Guru Team (These users must additionally have access to your IDP.).

6. Select your Session Timeout in days. Guru's default is 14 days.

7. When you're ready to turn it on, change the SSO state to Enabled.


✍️ Note

If you use Google Workspace, Google Auth (logging in by clicking the Sign in with Google button on Guru's sign-in page) is available on any Guru plan. However, as an Admin, you cannot limit end users to only sign in via Google Auth.



Did this answer your question?