Business plan admins can enable SSO under Admin → Security → Single Sign-On. Orbit supports SAML 2.0 with identity providers such as Okta, Entra ID, and Google Workspace. You'll provide your IdP metadata URL and map email, first name, and last name attributes.
After enabling SSO, members in your verified domain sign in through your provider instead of a password. Turn on "Require SSO" to enforce it for everyone in the organization. Test with a single account before rolling it out broadly.