SSO access: How to Enable and Configure?

Single Sign‑On (SSO) allows managers and employees to log into Day.io using the same corporate credentials they use for other services, eliminating the need to re‑enter passwords.

You configure SSO in the Admin Panel by activating the feature, verifying your company domain, and copying unique keys to your identity provider.

Once enabled, users can sign in to Day.io via SSO for secure, convenient access.

1. Access SSO settings

   • Log in to the Admin Panel with an admin account.

   • Go to Settings (⚙️) and select SSO.
     
     

2. Activate Single Sign‑On

   • Toggle the Single Sign‑On (SSO) switch to enable the feature.
     
     

3. Enter your company domain

   • In the Domain field, enter the domain used in your corporate email addresses (e.g., oitchau.com.br).

   • After certifying the information is correct, click Verify.
     
     
     

4. Copy the integration keys

   • After domain verification, three fields appear:

     • Audience Oitchau (EntityID / metadata.xml)

     • Oitchau Assert Endpoint (ACS URL)

     • Oitchau Certificate (x.509)

   • Copy these values to your identity provider’s configuration.
     
     

5. Save and finish

   • Click Save to apply the settings.

   • Managers and employees can now sign in to Day.io via SSO.
     
     

Tips or troubleshooting

• Ensure the domain matches your company’s email domain.

• If the keys aren’t visible, confirm that the domain has been verified.

Best practices

• Generate secure certificates in your identity provider and keep them up to date.

• Test logins with admin and employee accounts after enabling SSO.

• Document the URLs and credentials used for future maintenance.

Frequently Asked Questions

1. Can I use SSO with more than one domain? No. Only one verified domain can be configured at a time.

2. Does SSO disable email/password login? No. Users may still log in with email and password if allowed by your company.