Single Sign-on Connection

After you enable single sign-on (SSO), you can track the connection's status on the Single sign-on page. You can also manage details, such as the organisation name to display when users sign in.

Turn On SSO

After you configure your connection, you can turn on SSO to enable users to sign in through your identity provider (IdP). Users with emails on your claimed domains are then redirected to your IdP when they sign in with their Blackbaud IDs. After they authenticate through your IdP, their Blackbaud IDs:

  • Automatically redirect to your organisation's login for future sign-ins

  • Use your IdP for password updates, lockouts, and other authentication management

Make sure to resend any pending invitations that were sent before you turned on SSO. To configure your SSO connection, see our instructions for setting it up with Microsoft Entra AD, Google Workspace, OpenID Connect (OIDC), or SAML 2.0.

Turn Off SSO

On the Single sign-on page, you can turn off your SSO connection as necessary, such as to troubleshoot an issue or change the connection method. After you turn off SSO:

  • Your organisation's users will sign in through Blackbaud's secure authentication service. They will receive email to reset their passwords.

  • You can still use your SSO connection in test mode to verify and manage settings.

To turn off your SSO connection, select Turn off SSO. Then on the Turn off SSO connection screen, select the Turn off SSO connection checkbox and select Turn off SSO connection.

Have issues with your SSO connection? To help troubleshoot, see SSO Connection Troubleshooting.