Skip to main content

Setting up SAML single sign-on (SSO) for your practice

Requiring your team members to log in to Upheal using SAML single sign-on (SSO)

Written by Kit Woodin
Updated over 2 weeks ago

You can set up SAML single sign-on, or SSO, to require all team members in your organization to log in to Upheal with their emails from your identity provider, such as Microsoft Entra or Okta.

If you want to set up SSO using Google workspace, see Setting up Google single-sign on (SSO) for your practice.

Only practice administrators can change SSO settings.

SAML single sign-on is only available to organizations on Upheal’s Enterprise Plan.

Set up SAML single sign-on

  1. In Upheal, click Practice settings.

  2. Scroll to SAML SSO and click Configure.

  3. Enter the SAML configuration details from your identity provider and click Save configuration.
    SAML SSO is not yet active. Before you activate, test the configuration and login.

  4. Click Test configuration.
    If the test is successful, move on to step 5. If the test fails, check your configuration details. If you need help, contact support in the Upheal app.

  5. If the configuration test is successful, click Test login.
    If the test is successful, move on to step 6. If the test fails, check your configuration details. If you need help, contact support in the Upheal app.

  6. Once both configuration and login tests have been successful and you are ready to turn on SAML SSO, click Activate.

  7. To confirm, click Activate SAML.

Your team members will now log in to Upheal using your organization’s email.

​When team members enter their organization email on the Upheal login page, they will be redirected to your identify provider login.

Turn off SAML single sign-on

If you want to switch from SAML SSO to logging in to Upheal with unique passwords, you can deactivate SAML SSO.

Keep in mind:

  • Team members will need to set a password for Upheal

  • Team members need a phone number in their profile to set a password, so make sure all team members have phone numbers set in Team members settings before deactivating.

  1. In Upheal, click Practice settings.

  2. Scroll to SAML SSO and click Deactivate.

  3. In the pop-up window, set your preference for sending password reset emails to team members. If you don’t sent password reset emails, you’ll need to notify your team yourself. They can request a password reset on the Upheal login page if needed.

  4. Click Yes, deactivate.

Delete SAML SSO configuration

If you want to delete the configuration, you can do so once SAML SSO has been deactivated.

  1. Follow the steps above to deactivate SAML SSO.

  2. Click Edit configuration.

  3. Click Delete configuration.

  4. In the pop-up window, click Delete configuration.

Did this answer your question?