What is Single Sign-On?

Single Sign-On allows your staff to log into Involve using their existing Google or Microsoft account credentials, rather than a separate Involve-specific password. This is particularly useful if your school already uses Google Workspace or Microsoft 365.

Enabling SSO

To enable SSO for your school, go to Settings → General Settings and look for the "Enforce Google/Microsoft sign-in" checkbox. When ticked, this enforces Google or Microsoft sign-in for all staff members at your school. Note that this option is currently only available for staff members. Parents and students will continue to use their separate Involve-specific password.

What happens when SSO is required?

Once enabled, staff members will no longer be able to log in using an email and password. If they attempt to do so, they'll see the message: "Your school requires single sign-on authentication. Please sign in using Google or Microsoft."

This also applies to password recovery—users won't be able to reset their password since they'll need to use SSO instead.

How it works for existing users

When a registered user signs in via Google or Microsoft for the first time, Involve automatically matches them to their existing account using their email address. Their account is seamlessly updated to include the SSO login method, so there's no disruption to their data or settings.

If someone tries to log in via SSO but doesn't have an Involve account, they'll receive a "User not found" error—SSO doesn't automatically create new accounts.

Before you enable SSO

Make sure all your staff members have Google or Microsoft accounts that match the email addresses registered in Involve. This ensures everyone can continue accessing their accounts without issues.