Skip to content
Dashboardblocks
GitHub (opens in a new tab)
BlocksAccount and admin

Single Sign-On, Pro

SAML single sign-on for a workspace, with the details to copy, the identity provider's own, verified domains, Require single sign-on and Remove.

SAML single sign-on for the admin who runs a company's identity, with domains verified by DNS.

Okta Setup

Okta set up with one verified domain, the values for the identity provider, and a switch to require single sign-on.

Pro

Single sign-on

Let people sign in with your company’s identity provider over SAML.

Set up

Add these to your identity provider

Create a SAML app in your identity provider with these two values.

ACS URL
https://app.northwind.dev/sso/saml/acs/ws_4f9a
Entity ID
https://app.northwind.dev/sso/saml/metadata/ws_4f9a

Your identity provider

Set up by Sam Okafor on Sep 22, 2026.

Domains

Once single sign-on is required, everyone with an email at a verified domain signs in with it.

  • northwind.comVerified
  • northwind.ioNot verified
    Add this TXT record to northwind.io’s DNS, then verify.
    northwind-verification=b81d04c6fa2e9137
Require single sign-onEveryone at northwind.com would sign in with Okta. Owners can still use a password.
Remove single sign-onDeletes the identity provider’s details and turns Require off. Domains stay verified.

Turned Off by Plan

Single sign-on after the plan changed, with the details read only and everything set up still removable.

Pro

Single sign-on

Let people sign in with your company’s identity provider over SAML.

Off
Single sign-on is off: it comes with Business. Change the plan to turn it back on.

Identity provider

Set up by Sam Okafor on Sep 22, 2026.

Provider
Okta
Sign-in URL
https://northwind.okta.com/app/northwind_app/exk8f2m1q9/sso/saml
Issuer
http://www.okta.com/exk8f2m1q9ZrT4bH5d7

Domains

Once single sign-on is required, everyone with an email at a verified domain signs in with it.

  • northwind.comVerified
Require single sign-onOff for now, so people sign in with a password. It applies again once single sign-on is back.
Remove single sign-onDeletes the identity provider’s details and turns Require off. Domains stay verified.

Settings

Members and invites, API keys, notification preferences, integrations, webhooks, a danger zone and your profile.

Team

Member lists with presence, workload against capacity, who is online, on-call rotas, roles and permissions, and sharing.

On this page

Okta SetupTurned Off by Plan