Single-sign on (SSO) streamlines CMS access for your team by allowing user login using your organization's existing credentials, improving both security and convenience.
Note: To add-on SSO to your plan, connect with your Customer Success Specialist to discuss availability with your plan and identity provider (or support@madewithcircuit.com).
Enabling SSO in Circuit Configuration
To get started, your Customer Success Specialist turns on SSO in your CMS settings.
Confirm your organization's identity provider
Confirm Optional or Enforced Single Sign-On: You can choose to strictly enforce SSO. If checked (enforcing SSO), the traditional username and password login fields will be disabled to log in to your CMS.
Migration of Existing Users
By default, existing user accounts are not immediately restricted to SSO just by enabling it. If you have chosen to enforce SSO for your organization, the Circuit team will handle the migration of your existing users. Our system administrators will run a backend command to smoothly transition all existing user accounts.
⚠️ Once a user logs in using SSO for the first time, their account is permanently marked to use SSO, and they will no longer be able to log in with a username and password, even if you do not enforce this globally.
Inviting and Managing New Users
When SSO is enabled, Tour Managers can manage SSO users.
Adding a New Single Sign-On User
Go to Settings > Users
Click Add Single Sign-On User
Input the user's Email Address and choose their assigned Roles (Editor, Moderator, or Manager).
Create the Single Sign-on User.
Managing Single Sign-on Users
Circuit maintains a list of email addresses authorized to log in using SSO. You can track this in the Manage Invites section.
Go to Settings > Users
Click Manage invites
Select the user you want to Edit or Delete
Edit the user information, or delete the user
The list will show which invites are Pending (the user has not logged in yet) and which are Active (the user has successfully logged in).
The User won’t be created in the CMS until the user completes their first successful SSO login. Once they log in and the account is created, their status changes to active.
Circuit will automatically generate a username for new SSO users based on the first part of their email address (before the domain of the email following the ‘@’). If that username is already taken, a number will automatically be appended to make it unique (e.g., user1).
If you have any questions about Single Sign-On, please connect with your Customer Success Specialist or support@madewithcircuit.com.