Prerequisites
Before beginning the SSO setup process, ensure you have:
An active profile in MarketScale with Admin permissions in the channel in which you want to set up SSO
Administrative access to your organization's identity provider (Azure AD, Okta, etc.)
Authority to create and configure enterprise applications
Your organization's verified domain
A list of users who need access to MarketScale
Important: The person initiating SSO setup should have both Admin permissions in the MarketScale channel and administrative access to your organization's identity provider. If you're a MarketScale channel admin but don't manage your company's identity provider (Okta, Azure AD, etc.), coordinate with your IT team first. They'll need to be the one completing the configuration in the setup portal.
As per industry-standard practices and compliance requirements, your organization is responsible for:
Configuring your identity provider
Managing user access and permissions
Maintaining and updating your SSO configuration
Troubleshooting integration issues on your IdP side
Note: Single sign-on is available for Business and Enterprise subscriptions.
Setup Process
Follow this step-by-step guide to configure SSO for your channel.
Step 1: Confirm You Have the Right Access
You'll need two things before starting:
Admin permissions in the MarketScale channel where you want to configure SSO.
Administrative access to your organization's identity provider (Azure AD, Okta, Google Workspace, etc.). This is typically managed by your IT team.
If you have MarketScale Admin access but not identity provider access, loop in your IT administrator before proceeding. They'll need to complete the identity provider configuration in the setup portal. For more detail on who needs what access and how to coordinate, see Admin Role Requirements for SSO Setup.
Step 2: Request SSO Setup
Let us know you'd like to set up SSO for your organization. We'll verify that your account has the right permissions and that your channel is on an eligible plan, then provide you with a personalized setup portal link.
Step 3: Configure Your Identity Provider
Using the setup portal link we provide, you will:
Verify your domain ownership
Configure Single Sign-On settings
Select your identity provider (Azure AD, Okta, Google, etc.). To confirm your provider is supported, see Supported Identity Providers for MarketScale SSO.
Follow provider-specific instructions to complete integration
Set up Directory Sync to manage user access (optional)
Important: The initial link we provide expires in 5 minutes, so click through promptly. Once you are inside the portal, your session will remain active while you complete configuration. We recommend bookmarking the portal at this point. You can return to it at any time to update your SSO settings, enable directory sync, adjust login policies, or make other changes without needing a new link from us.
Step 4: Verification and Activation
Let us know once you've completed the configuration
Our team will verify your setup and confirm that secure data is populating correctly
Once verification is complete, your users can begin accessing MarketScale via SSO
Common Issues and Troubleshooting
Below are some common issues you may encounter. For a more comprehensive list including login issues, directory sync problems, and FAQ, see SSO Troubleshooting and FAQ.
Issue | Possible Solution |
Users cannot log in via SSO | Verify user accounts exist in both systems and are properly mapped |
"Invalid configuration" error | Check that all URLs and certificates are correctly entered |
"Domain not verified" message | Complete the domain verification process in the setup portal |
Certificate errors | Ensure your IdP certificates are not expired |
Provider-Specific Resources
Each identity provider maintains detailed documentation for SSO integrations:
Support Limitations
Please note that while we provide guidance for SSO setup, the configuration within your identity provider is your organization's responsibility. For issues specific to your identity provider configuration, please contact your provider's support team.
If you encounter issues with the MarketScale side of the integration, let us know and include details of the problem and any error messages you're receiving.
Frequently Asked Questions
Q: Can we use multiple identity providers?
A: Currently, MarketScale supports one identity provider per organization.
Q: How long does the SSO setup process typically take?
A: Most organizations complete the setup within 1-2 hours, depending on their familiarity with SSO configurations.
Q: Can we test SSO before rolling it out to all users?
A: Yes, we recommend setting up a test user in your identity provider to verify the integration works correctly before full deployment.
Q: What authentication protocols do you support?
A: MarketScale supports SAML 2.0 and OpenID Connect (OIDC) protocols for SSO integration.
Q: Do you support Just-In-Time (JIT) user provisioning?
A: Yes, with directory sync enabled, new users can be automatically provisioned when they first attempt to access MarketScale via SSO.
Related articles: