Single Sign-On (SSO) for Enterprise

Single sign-on (SSO) lets your team sign in to Tiiny Host through your company's identity provider. You can also use it to lock a project so only people in your organization can open it. It works with any identity provider that supports SAML or OIDC.

Want SSO for your team? Book an enterprise call.

Set up SSO

Only the account owner can set up SSO. Team members can't.

1. Click the plan-name button (top right) → Manage Account → Sign-in & security.
2. Next to Enterprise SSO, click Enable. A setup page opens in a new tab.
3. Enter your identity provider's details on that page.
4. Go back to your dashboard. The row shows Connected once SSO is working.

If the row shows Check connection status, click it to refresh. To change your details later, click Edit.

If Enable opens a page to book a call, SSO isn't switched on for your account yet. Book the call and we'll set it up.

How your team signs in

• Your team enters their company email on the login screen. If your company uses SSO, they're asked to continue with SSO.
• The first time someone signs in, we create their account and add them to your team. No invite email is sent.
• SSO only works with company email addresses. Free email providers like Gmail aren't supported.
• Someone who already has their own paid Tiiny Host account can't join your team through SSO. The same goes for someone who's already in another team.
• If someone has a free Tiiny Host account with the same email, that account is added to your team.
• Sign-ins stay valid for up to 14 days.

Protect a project with SSO

Only the account owner can turn this on.

1. For a new project, open the Access gate dropdown in the upload window. For an existing project, click Update → Customize project, then open Access Mode under Access Settings.
2. Choose Require SSO login.
3. Click Publish.

Visitors sign in through your identity provider instead of entering a password. They're asked to sign in again after about 15 minutes.

Only people with an account in your identity provider can open the project. For clients outside your organization, use password protection instead.

To turn it off, change Access Mode (under Access Settings) to another option.

Remove someone from your team

Removing someone in your identity provider doesn't remove them from Tiiny Host. Automatic user provisioning (SCIM) isn't available.

To remove someone for good, do both:

1. Remove them from your team in Tiiny Host.
2. Remove their access to Tiiny Host in your identity provider.

Projects they published stay in your account.

Updated on: 13/10/2026