--- title: "Manage Single Sign-On (SSO) in Enterprise Hub" slug: "manage-single-sign-on-sso-in-enterprise-hub" tags: ["Area - Enterprise Hub", "Focus - Construction", "Focus - Service Replacement", "Role - Admin", "Type - Commercial", "Type - Residential"] updated: 2026-10-15T00:32:29Z published: 2026-10-15T00:32:29Z canonical: "help.servicetitan.com/manage-single-sign-on-sso-in-enterprise-hub" excludeFromExternalSearch: true --- > ## Documentation Index > Fetch the complete documentation index at: https://help.servicetitan.com/llms.txt > Use this file to discover all available pages before exploring further. # Manage Single Sign-On (SSO) in Enterprise Hub ## Overview Single Sign-On (SSO) allows users to access Enterprise Hub using their Microsoft Entra credentials instead of a separate username and password. This simplifies login and centralizes authentication through your identity provider. --- ### #### Who uses this feature - Administrators - Applies to all business types - Applies to all trades #### Feature configuration - This feature is currently in Private Preview. It is subject to change. If you're interested in joining the waitlist for the Private Preview, please fill out [this form](https://docs.google.com/forms/d/e/1FAIpQLSdJd1mox5wjf2Yl2zBuCbbmM6aQwcPbbvqsId2RcGW5gE1B4Q/viewform). ## Before you begin - You must have Administrator permissions in Enterprise Hub. - You must have access to your organization's Microsoft Entra tenant ID. For more, see [Set up Microsoft Entra ID Single Sign-On (SSO) and link user accounts](/construction/docs/set-up-microsoft-entra-id-single-sign-on-sso-enterprise-hub-link-user-accounts). - SSO must be configured separately for each environment, for example: Go, and Next. - If a connection is not set up in an environment, users cannot access that environment using SSO. - Only Microsoft Entra is currently supported. - Multiple Entra connections can be added, for example, for different business units. ## Create an SSO connection in Enterprise Hub Settings 1. In Enterprise Hub, go to **Settings > Single Sign-On (SSO)**. 2. Click **Add Connection**. ![ServiceTitan interface showing Single Sign-On settings with an 'Add Connection' button highlighted.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-jpdz53e4.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) 3. In the window that opens: 1. Enter an **Integration Name**, for example: *Hometown SSO*. 2. Enter your **Microsoft Entra Tenant ID**. You can retrieve this from your Microsoft Entra admin portal. 4. Click **Proceed with Entra Setup**. Enterprise Hub automatically copies a setup URL to your clipboard. 5. Select **Enable Auto Linking** for organizations with many users, auto-linking reduces manual setup. When enabled: 1. Users select **Continue with Entra** on login. 2. They authenticate with Microsoft. 3. Enterprise Hub prompts them to confirm linking. 4. After confirmation, their accounts are automatically linked. 5. If a user declines linking, they must log in using their Enterprise Hub username and password. ![Form to connect Microsoft Entra ID with setup instructions and action buttons.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-lgdk8tsi.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) 6. Open a new browser tab. 7. Paste the URL into the address bar. You are redirected to Microsoft Entra to complete the consent process. 8. Review the permission request. 9. Click **Confirm**. When the permission is granted, the connection status updates to *Active*. ## Understand connection statuses in Microsoft Entra Each connection displays a status tag: - **Pending**: Microsoft consent has not been completed. - **Active**: Connection is live and ready for user linking. - **Inactive**: Connection has been deactivated. - Deleted connections no longer appear in the list. ![Overview of Single Sign-On settings with status indicators for various services.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-szxdif1h.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) If the URL was not copied automatically, you can: - Locate the connection in the list. - Click the clipboard icon to copy the setup URL manually. ## Edit, deactivate, or delete a connection From **Settings > Single Sign-On (SSO)**, click **More** ![](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-truhwkn4.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) next to a connection. You can: **Edit** - Update the integration name. - Enable or disable auto-linking. **Deactivate** - Temporarily disables SSO for this connection. - Keeps configuration and user links. - Does not require repeating Microsoft consent if reactivated. > [!NOTE] > **Note:** Use Deactivate when troubleshooting or preparing to migrate connections. **Delete** - Deletes all configuration and user link data. - Requires full reconfiguration and consent if recreated. ![](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-ue23045e.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) ## Manage user SSO linking To manage users: 1. Go to **User Management.** 2. In the side panel, click **Security > SSO**. This screen lists all active users and their SSO status. ![User accounts listed with SSO status and email details for security configuration.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-a6gyl5il.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) ### User status indicators - **Green (Enabled):** User is linked and SSO is active. - **Red (Disabled):** User is linked but SSO login is disabled. - **Gray (Not Linked):** User has not been linked to Microsoft Entra. You can: - Search by name, username, email, or domain. - Filter by *Enabled*, *Disabled*, or *Not Linked*. ![User management interface displaying search bar and user account details with SSO status.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-r5xrlqsd.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) ## View connection details 1. Click **More** ![](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-dn1cf3xg.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) next to a user. 2. Select **Connection Details**. You can view: - Enterprise Hub user information - Microsoft Entra Tenant ID - Microsoft Entra Object ID (unique user identifier) ![Connection details including username, email, tenant ID, and object ID information.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-4wvkvny6.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) ## Disable or unlink a user From *Connection Details*, you can: **Disable** - Turns off SSO for that user. - User logs in with Enterprise Hub credentials. - Keeps the link intact. **Unlink** - Removes the Microsoft Entra association. - Logs in with their credentials - Deletes the stored Entra user data. - Requires relinking to re-enable SSO. ## Link a user If a user is not linked: 1. Click **More ![](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-meyp2bvt.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D)** next to the user. 2. Select **Link**. 3. Select the appropriate Microsoft Entra organization. ![User linking interface showing options to select organization and users for ServiceTitan.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-dxv5vpj9.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) 4. Sign in with your Entra account and grant permission to list the accounts. ![Microsoft login screen requesting permissions for the ServiceTitan app access.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-dbkqyv4k.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) 5. Select the matching Entra user from the list. ![User linking interface showing options to select organization and users for ServiceTitan.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-ju5u6sg6.png?sv=2026-02-06&spr=https&st=2026-10-31T03%3A47%3A53Z&se=2026-10-31T04%3A47%3A53Z&sr=c&sp=r&sig=ZNoH6zUQZVloeLp0zw%2BxQy3CN7pAyEHbwdlIrUT%2BOcA%3D) 6. Or, manually enter the user's Entra Object ID. 7. Confirm to complete linking. When linked, the user status changes to **Enabled**. ## Want to learn more? - See [Set up Microsoft Entra ID Single Sign-On (SSO) and link user accounts](/construction/docs/set-up-microsoft-entra-id-single-sign-on-sso-enterprise-hub-link-user-accounts)