Sign in to an SSO-enabled organization
| SAML single sign-on for CircleCI is available for Scale Plan customers. See Prerequisites and Limitations for further details. Submit feedback on our Ideas board. |
Join an organization
To join a CircleCI organization that has SSO enabled you must first have an active CircleCI account that you log into with an email and password or with social logins like GitHub or Bitbucket. For more information on creating a CircleCI account, see the Sign up and try page.
| If you use OAuth/social login to join CircleCI, it is important to SSO authorize in GitHub/Bitbucket as well as in CircleCI. |
Once you have a CircleCI account you can join an SSO-enabled CircleCI organization in one of the following ways:
Authenticate with SSO for an organization
You must be logged in to your CircleCI account in order to authenticate with SSO for an organization.
If you have authenticated with an SSO-enabled CircleCI organization previously and your session has expired, the next time you attempt to access your organization’s resources, you will be redirected to your org’s Identity Provider (IdP) to authenticate before being granted access once again.
When your session expires, you will be prompted to re-authenticate.
Logging in via your Identity Provider (IdP) is not supported. Instead you can bookmark the SSO authentication link. The URL is https://circleci.com/authentication/login?f=ssovalidate&organization-id=<organization_id>, where organization_id is the organization ID (a universally unique identifier) that represents your organization. You can find your CircleCI organization ID by navigating to in the CircleCI web app. |