Enterprise SSO
Keep everyone out of your company until your identity provider lets them in. Sign-in still proves who they are to Pixelbase; SSO decides whether they get into your company.
Already have an account? Sign in
Pick your identity provider
Your identity provider decides who gets in.
OIDC or SAML, set up from the same Settings page your admins already use.
Any major identity provider
Microsoft Entra ID, Okta, Google Workspace and Auth0, or any provider that speaks OIDC or SAML 2.0.
Enforced for everyone
Turn on enforcement and nobody reaches the company without SSO — owners and admins included. Agent and API connections are refused too.
Offboarding from your IdP
Connect SCIM and when someone is deactivated in your identity provider, they're removed from your company.
Verified domains
Prove you own your email domain with a DNS record. We re-check it daily, and only accounts on it are matched.
Session length you choose
Decide how long an SSO sign-in lasts, from fifteen minutes to a week, before people go back through your IdP.
Never locked out
A break-glass code gets the owner past SSO if your IdP breaks. You copy it before enforcement turns on.
Linked accounts
See which IdP account each person signed in with, and unlink one that was linked by mistake.
Delegated setup
Hand SSO configuration to the person who runs your identity provider with the SSO permission, without making them an owner.
Pricing
One flat monthly price per company, however many people sign in. Cancel any time from Settings.
- Single Sign-On
- $399per company / month
Require employees to sign in through your identity provider — Microsoft Entra ID, Okta, Google Workspace, Auth0, or any OIDC provider.