LeadLex
Help center articles

Sign in with SSO through your identity provider

How single sign-on works in LeadLex, how your team signs in with a work email, and how to have SSO set up for your firm's domain.

Last updated

LeadLex supports SAML single sign-on (SSO), so your team can sign in through your firm's identity provider, such as Microsoft Entra ID or Okta. LeadLex sets SSO up for your email domain on request; once it is on, people choose Sign in with SSO on the login page and enter their work email.

Continue with Microsoft and Continue with Google on the same page are ordinary sign-ins with a Microsoft or Google account. They are not SSO.

Sign in with SSO

  1. Go to app.leadlex.com and choose Sign in with SSO.
  2. Under Sign in with your organization, enter your Work Email.
  3. Choose Continue with SSO. Your identity provider's sign-in page opens.
  4. Sign in there. You return to LeadLex, signed in.

The first time someone signs in through SSO, LeadLex adds them to the workspace for their email domain with that domain's default role, which is usually Member. Nobody has to invite them first.

If you see "SSO is not configured for this domain. Contact your administrator.", SSO is not set up for your domain yet. Use ← Back to regular sign in and sign in another way.

Set up SSO for your firm

Workspace admins cannot switch SSO on themselves. Write to lexi@leadlex.com with your firm's email domain and your identity provider, and LeadLex configures the SAML connection with you.

The Plans tab under Settings → Billing & Usage lists SSO / SAML authentication with the Organization plan.

Check your SSO setup (admins)

Open Settings → Security & Privacy and find the Single Sign-On (SSO) card.

  • When SSO is on, Configured Domains lists each domain with its default role and whether it is Active or Inactive, plus how many people have been provisioned through SSO.
  • When it is off, the card says "SSO is not configured for this workspace. Contact LeadLex support to set up SSO with your identity provider (Microsoft Entra ID, Okta, etc.)".

The card is read-only. To add a domain or change the default role, contact LeadLex.

LeadLex does not support SCIM today, so removing someone in your identity provider does not remove them from LeadLex. Remove leavers under Settings → Team as well. See Roles and permissions.

What happens next

Combine SSO with two-factor authentication at your identity provider, or require it in LeadLex. See Two-factor authentication.

Was this article helpful?

Something here does not match what you see in LeadLex? Write to lexi@leadlex.com and we will correct it.