What is Single Sign-On (SSO)?

Single Sign-On (SSO) allows your team to log in to Lepaya using their existing work accounts, like Google or Microsoft. This makes logging in easier for users and safer for your company.

How to Set Up SSO

Setting up SSO is simple. We just need to create a special link. Your IT team can use that link to connect your system with Lepaya.

⚠️

The link expires 5 days after it’s created or 5 hours after it’s first opened - whichever comes first.

If you don’t have access to the Lepaya Portal:

Ask your Customer Success Manager (CSM) to generate the setup link. Then send that link to your IT contact.

If you do have access to the Lepaya Portal:

1. Go to https://portal.lepaya.com
2. Click on Configuration → Single Sign-On
3. Click Generate configuration link and follow the instructions
4. After that, you can test the login.
5. If you're using Microsoft (Entra or Azure), make sure you also turns on "Expiry reminders". This helps avoid login issues in the future.

If anything’s unclear or not working, just reach out to us. We’re here to help.

Troubleshooting

A user can’t log in?

Ask your IT person to double-check the setup:

1. Check these things:
   1. Are the redirect URLs correct?
   2. If you’re using Microsoft, is the client secret still valid?
   3. Is the user allowed to use the Microsoft app?
   4. Does the user’s email match the domain you entered during setup?
      → For example, if you entered @company.com but the user tries to log in with @company.io, it won’t work. In that case, you’ll need to generate a new setup link and update the domain.
2. If all the above are ok, please follow the setup steps again

Still stuck?

No worries. If you’ve already tried the steps above, email us.

Please ask your IT person to attach a screenshot of the failed login attempt:

1. Go to your Azure application > Sign-in Logs
2. Find the failed login
3. Click it and take a full screenshot
4. Send it to us by email