Single sign-on (SSO) lets your team log in to CoSchedule through your company's identity provider instead of a password. SSO is available on Suite, and the Owner or a Manager sets it up. See Team member roles.
CoSchedule supports Service Provider Initiated SAML (Security Assertion Markup Language). Identity Provider (IdP) Initiated SSO and OpenID Connect (OIDC) aren't supported.
Once SSO is set up, everyone you invite to your company afterward logs in with SSO by default.
Add CoSchedule to your identity provider
In your identity provider, create a new service for CoSchedule using the values below. Your provider's own help explains where to enter them.
Setting | Value |
|---|---|
ACS URL | https://login.coschedule.com/saml2/idpresponse |
Entity ID | urn:amazon:cognito:sp:us-east-1_ekrdmah0C |
Map these attributes:
Field | SAML attribute |
|---|---|
First name | http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname |
Last name | http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress |
When the service is set up, copy its SAML metadata URL. If your provider doesn't give a public URL, get its SAML XML metadata instead. To find the metadata in common identity providers, see their help:
- Okta: Okta help on finding a SAML app's metadata URL
- Microsoft Entra ID: Microsoft Entra ID help on finding an enterprise app's SAML metadata URL
- Google Workspace: Google Workspace Admin help on getting the SAML metadata for a custom SAML app
Connect your identity provider to CoSchedule
- Log in to CoSchedule as the Owner or a Manager.
- From your calendar, open Settings.
- Click the Security tab.
- Enter your SAML metadata URL. If your identity provider doesn't give a public URL, paste the SAML XML metadata instead. Using a URL is recommended.
- Click Save.
After CoSchedule validates your metadata, the SSO User Management area appears. Use it to turn SSO on or off for each person in your company.
Turn SSO on or off for a team member
People already on your team when you set up SSO keep logging in the way they do now until you turn SSO on for them.
- From your calendar, open Settings.
- Click the Security tab.
- In SSO User Management, change the SSO Enabled option for the person.
What changes for that person:
- Turned on: they can no longer log in with a password. They log in only through your identity provider.
- Turned off: they get an email asking them to set a new password, and they can no longer log in through your identity provider.
- Either way, they have to log in again using the new method.
Turn off SSO for your company
- Log in to CoSchedule as the Owner or a Manager.
- From your calendar, open Settings.
- Click the Security tab.
- In SSO User Management, turn SSO off for every user. They'll then log in with a password.
- Click Disable SSO. This removes the SSO configuration from your company.
If you move to a plan without SSO
If your company moves to a plan that doesn't include SSO, the SSO setup is removed automatically. Everyone who logged in only with SSO is switched to a password login and gets an account-recovery email to set their own password.
If you're locked out
If your team can't log in after SSO is set up, contact CoSchedule support from the email address of your company's Owner. Once SSO is turned off for the people who are locked out, each of them gets an email to set a new password.