Single Sign-On (SSO): How It Works

Logging in with SSO

If your company uses Single Sign-On, you log in to Ottimate with your company credentials — the same Okta, Microsoft Entra ID (Azure AD), or Google login you use for your other work tools.  On the Ottimate login page, enter your work email; you are redirected to your company’s sign-in page automatically.  There is no separate Ottimate password.

What changes for SSO users

• No Ottimate password — password changes, resets, and "forgot password" all happen with your company login, not in Ottimate.

• Verification codes, passkeys, and 2-step settings are managed by your company’s identity provider, so those sections do not appear under Settings > Security.

• Access changes (new users, deactivations, email changes) are requested through your administrator.

Getting SSO enabled for your company

SSO is enabled per email domain, working with your IT team.  Your administrator requests it through your CSM or support@ottimate.com, and our team coordinates the identity-provider configuration with your IT.  Once the domain is live, users on that domain are redirected to SSO automatically at login.

Mixed logins: users whose email is not on the SSO domain continue logging in with email and password as before.