MASK Enterprise
Single Sign-On (SSO)
Centralize authentication with SAML 2.0 SSO. Connect your identity provider, enforce SSO-only access, and provision users automatically on first login.
SAML 2.0 Support
Connect MASK to your existing identity provider with full SAML 2.0 compliance. Supports Okta, Azure AD, OneLogin, Google Workspace, and any standards-compliant IdP out of the box.
IdP-Initiated & SP-Initiated
Users can sign in from your identity provider dashboard or directly from the MASK login page. Both flows are fully supported with automatic redirect and session establishment.
SSO Enforcement
Require all team members to authenticate through your identity provider. When enforced, password-based login is disabled organization-wide, ensuring a single authentication path.
Just-in-Time User Provisioning
New users are automatically created in MASK on their first SSO login. No manual account setup required — team members get access the moment they authenticate through your IdP.
Included on Enterprise.
SSO is available on all Enterprise plans. Connect your IdP and start onboarding your team in minutes.
Start a Free Pilot