# Sign in with SSO through your identity provider

> How single sign-on works in LeadLex, how your team signs in with a work email, and how to have SSO set up for your firm's domain.

Source: https://www.leadlex.com/help/account/single-sign-on
Last updated: 2026-10-23

LeadLex supports SAML single sign-on (SSO), so your team can sign in through your firm's identity provider, such as Microsoft Entra ID or Okta. LeadLex sets SSO up for your email domain on request; once it is on, people choose **Sign in with SSO** on the login page and enter their work email.

**Continue with Microsoft** and **Continue with Google** on the same page are ordinary sign-ins with a Microsoft or Google account. They are not SSO.

## Sign in with SSO

1. Go to [app.leadlex.com](https://app.leadlex.com/AuthLogin) and choose **Sign in with SSO**.
2. Under **Sign in with your organization**, enter your **Work Email**.
3. Choose **Continue with SSO**. Your identity provider's sign-in page opens.
4. Sign in there. You return to LeadLex, signed in.

The first time someone signs in through SSO, LeadLex adds them to the workspace for their email domain with that domain's default role, which is usually **Member**. Nobody has to invite them first.

If you see "SSO is not configured for this domain. Contact your administrator.", SSO is not set up for your domain yet. Use **← Back to regular sign in** and sign in another way.

## Set up SSO for your firm

Workspace admins cannot switch SSO on themselves. Write to [lexi@leadlex.com](mailto:lexi@leadlex.com) with your firm's email domain and your identity provider, and LeadLex configures the SAML connection with you.

The **Plans** tab under **Settings → Billing & Usage** lists **SSO / SAML authentication** with the Organization plan.

## Check your SSO setup (admins)

Open **Settings → Security & Privacy** and find the **Single Sign-On (SSO)** card.

- When SSO is on, **Configured Domains** lists each domain with its default role and whether it is **Active** or **Inactive**, plus how many people have been provisioned through SSO.
- When it is off, the card says "SSO is not configured for this workspace. Contact LeadLex support to set up SSO with your identity provider (Microsoft Entra ID, Okta, etc.)".

The card is read-only. To add a domain or change the default role, contact LeadLex.

LeadLex does not support SCIM today, so removing someone in your identity provider does not remove them from LeadLex. Remove leavers under **Settings → Team** as well. See [Roles and permissions](/help/account/roles-and-permissions).

## What happens next

Combine SSO with two-factor authentication at your identity provider, or require it in LeadLex. See [Two-factor authentication](/help/account/two-factor-authentication).