At a glance

• Typical setup time: About 20 minutes, split between you and your IT admin

• Who you need: A Hadrius admin, and an IT admin for your identity provider

• What Hadrius reads: Each user's identity provider profile at sign-in

Before you begin

You need the email address of the IT admin who manages your identity provider (for example Okta, Microsoft Entra ID or Google Workspace). They need permission to create a SAML application in it. They don't need a Hadrius account.

In Hadrius

Invite your IT admin

On the SSO integration page in Hadrius, enter your IT admin's email address in Admin email and click Send invite. Hadrius emails them a link to a guided setup page for your identity provider.

Use Send invite again at any time:

• To remind the same admin, send it to the same address.

• To hand setup to someone else, for example after a personnel change, enter their address and send it. The previous admin's link stops working.

For your IT admin

Connect your identity provider

Open the link in the invite email and choose your identity provider. The setup page walks through creating the SAML application and shows the exact values to copy into it. Assign the people who should be able to sign in to Hadrius to that application.

Back in Hadrius

Wait for the connection

The Your IT admin connects your identity provider step completes on its own once your IT admin finishes. Click Check connection to check right away.

Choose who signs in with SSO

Requirement status sets how strictly SSO is enforced:

• Not required: everyone can choose SSO or their password.

• Required for internal users: people on your Internal domains must use SSO. Everyone else can still use a password.

• Required for all users: everyone must use SSO. Hadrius won't allow this while any existing user's email domain is missing from the list, so nobody is locked out.

The domains table lists the email domains that can sign in through your identity provider. Your firm's own email domain is always first and always Internal. To add more, paste them into Add domains, one per line or separated by commas, and set each one to Internal (your own staff) or External (for example consultants or affiliates).

Your edits appear under Unsaved changes, where you can undo any of them. Click Save there to apply them.