Optional SSO Logins

Single sign-on (SSO) is a session and user authentication service that permits a user to use one set of login credentials -- for example, a name and password -- to access multiple applications. SSO can be used by enterprises, smaller organizations and individuals to ease the management of various usernames and passwords. If your organization uses SSO, you can purchase an add-on option to use it with our service as well for some plans.

Advantages of SSO include the following:

• It enables users to remember and manage fewer passwords and usernames for each application.
• It streamlines the process of signing on and using applications -- no need to re-enter passwords.
• It lessens the chance of phishing.
• It leads to fewer complaints or trouble with passwords

If you are on the Enterprise or Pro Annual plans, you can speak with your Customer Success Manager about having it added to your plan at an additional cost. Our customer experience team will support you through set-up and testing for the SSO connection.

These are the most common LeadIQ SSO Providers, but LeadIQ can support any SSO connection utilizing SAML 2.0:

1. Okta
2. Auth0
3. Duo
4. Azure
5. OneLogin
6. Other SSO (SAML 2.0)

We support the following identity Types:

1. SAML 2.0 (Most Common)
2. OIDC (Open ID Connect)
3. WSFed

SCIM (Auto Provisioning/Deprovisioning)

SCIM (System for Cross-domain Identity Management) specification, is an open standard designed to manage user identity information. The goal of SCIM is to securely automate the exchange of user identity data between your company's cloud apps and any Service Providers (SP).

The SCIM app will allow users from your identity provider (ie. Okta) to be automatically provisioned in LeadIQ. Through the app, the following can be accomplished:

• Assign SSO user to a team in LeadIQ (without the need to create the account on LeadIQ first and inviting the user manually).
  • ⚠️ Note: Users who are already part of other teams cannot be assigned to a new team via SCIM.
• Un-assign SSO user from a team in LeadIQ
  • This would tag the user as inactive on LeadIQ’s side and the user will not be able to log into the account.
  • The inactive user’s roles, credit limits, and groups will not be editable by a team admin.
  • The inactive user can still be removed from the team via the Prospector web app.
  • Other team admins within the team can still access the inactive user’s lead captures.
  • Inactive users are not counted as occupied seats when referring to licenses.
• Update the user’s name in LeadIQ by simply updating the user’s name through the Identity Provider.

SCIM is currently the only available method for automatic provisioning.

When setting up SSO for LeadIQ, please keep in mind that the configuration is for the whole team -- we cannot customize settings for specific team members. For example, we are unable to disable other login functions (name/password or Google account) for only some of your team members to force them to use SSO, but not others.

If you have any questions about SSO, you can reach out to your Customer Success Manager or the Support Team by clicking Submit a Request at the top right of this page.