SAML Authentication

Overview

Superhuman supports single sign-on (SSO) using any SAML-based Identity Provider (IdP).

Note: Superhuman also supports SSO for Google and Microsoft Accounts.

Configuring SAML

Warning: Modifying SAML/SSO settings may impact users' access to Superhuman. If you have any questions or need support, please reach out to hello@superhuman.com.

Prerequisites

• You will need administrator access to your organization’s Identity Provider
• Your team must be on a Superhuman Enterprise plan

Configuration Steps

Reach out to your Account Manager or hello@superhuman.com to get the setup process started.

Step 1. Check your inbox for an email with the subject Set up SSO and Directory Sync and click the button:

Step 2. Select the option to Configure Single Sign-On:

Step 3. Select your organization's Identity Provider:

Step 4. Follow the Identity Provider-specific configuration steps that appear:

FAQ

What information will Superhuman need to configure SAML for your organization?

To set up SAML, you’ll need to provide our team with the following information:

• The email address of your organization’s Identity Provider administrator
• Any domains that will be used for authentication
• Any email addresses that should be excluded from SAML policies

What’s the difference between SSO with a Google/Microsoft account vs. Superhuman?

If configured, users will still be prompted for SSO when logging into their email provider (Google or Microsoft). Superhuman's SAML implementation adds a layer of application-specific authentication.

Is Just-in-Time (JIT) Provisioning supported?

No, Superhuman does not support JIT Provisioning via SAML.

Pricing

SAML Authentication is available as part of Superhuman's Enterprise plan. If this plan fits your organization’s needs, please contact us to learn more.