Omni
FeaturesCheck-inPricingFAQDocs
Sign inStart free
Single sign-onAll pages
Guide
  • Getting started
  • Checking in
  • Geofencing
  • Custom hours
  • Invites
  • Requests & approvals
  • Importing employees
  • Single sign-on
  • Roles & privacy
Product
  • Product spec
  • Roadmap
  • Saudi market benchmark
  • Architecture
Guide
  • Getting started
  • Checking in
  • Geofencing
  • Custom hours
  • Invites
  • Requests & approvals
  • Importing employees
  • Single sign-on
  • Roles & privacy
Product
  • Product spec
  • Roadmap
  • Saudi market benchmark
  • Architecture

Single sign-on (SAML)

Omni supports SAML 2.0 sign-in with Microsoft Entra ID, Google Workspace, Okta and other SAML identity providers.

1. Register the identity provider

A platform admin runs this once per customer, against the Supabase project that hosts Omni:

npx supabase sso add --type saml \
  --metadata-url "https://login.microsoftonline.com/<tenant>/federationmetadata/2007-06/federationmetadata.xml" \
  --domains company.sa

In the identity provider, set the ACS URL and Entity ID to the values Supabase prints.

2. Map the domain in Omni

Go to Settings → Single sign-on and add the email domain (for example company.sa). Keep auto-join on so that people from that domain join your company the first time they sign in.

3. Sign in

Users type their work email and choose Company SSO on the sign-in page.

On this page
  • 1. Register the identity provider
  • 2. Map the domain in Omni
  • 3. Sign in