MASK Enterprise
Single Sign-On (SSO)
Centralize authentication with SAML 2.0 SSO. Now in early access. Connecting your identity provider, SSO-only access, and automatic provisioning are rolling out and available on request.
SAML 2.0 Support
SAML 2.0 SSO is in early access. We're building connections to identity providers including Okta, Azure AD, OneLogin, and Google Workspace. Available on request while we roll it out.
IdP-Initiated & SP-Initiated
We're building both IdP-initiated sign-in (from your identity provider dashboard) and SP-initiated sign-in (from the MASK login page), with automatic redirect and session establishment. Available on request as SSO rolls out.
SSO Enforcement
On our roadmap: require all team members to authenticate through your identity provider, with password-based login disabled organization-wide for a single authentication path. Contact us about early access.
Just-in-Time User Provisioning
On our roadmap: new users provisioned in MASK automatically on their first SSO login, so team members get access the moment they authenticate through your IdP. No manual account setup. Available on request as we build it out.
Included on Enterprise.
SSO is in early access for Enterprise plans. Talk to us to join the rollout and connect your identity provider.
Start a Free Pilot