--- title: "Manage Single Sign-On (SSO) in Enterprise Hub" slug: "manage-single-sign-on-sso-in-enterprise-hub" tags: ["Area - Enterprise Hub", "Focus - Construction", "Focus - Service Replacement", "Role - Admin", "Type - Commercial", "Type - Residential"] updated: 2026-07-22T09:41:33Z published: 2026-07-22T09:41:33Z canonical: "help.servicetitan.com/manage-single-sign-on-sso-in-enterprise-hub" excludeFromExternalSearch: true --- > ## Documentation Index > Fetch the complete documentation index at: https://help.servicetitan.com/llms.txt > Use this file to discover all available pages before exploring further. # Manage Single Sign-On (SSO) in Enterprise Hub ## Overview Single Sign-On (SSO) allows users to access Enterprise Hub using their Microsoft Entra credentials instead of a separate username and password. This simplifies login and centralizes authentication through your identity provider. --- ### #### Who uses this feature - Administrators - Applies to all business types - Applies to all trades #### Feature configuration - This feature is currently in Early Access and available for specific accounts. It is subject to change. If you want to enable this feature for your account, please contact your Customer Success Manager (CSM) for details. ## Before you begin - You must have Administrator permissions in Enterprise Hub. - You must have access to your organization's Microsoft Entra tenant ID. For more, see [Set up Microsoft Entra ID Single Sign-On (SSO) and link user accounts](/v1/docs/set-up-microsoft-entra-id-single-sign-on-sso-and-link-user-accounts). - SSO must be configured separately for each environment, for example: Go, and Next. - If a connection is not set up in an environment, users cannot access that environment using SSO. - Only Microsoft Entra is currently supported. - Multiple Entra connections can be added, for example, for different business units. ## Create an SSO connection in Enterprise Hub Settings 1. In Enterprise Hub, go to **Settings > Single Sign-On (SSO)**. 2. Click **Add Connection**. ![ServiceTitan interface showing Single Sign-On settings with an 'Add Connection' button highlighted.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-jpdz53e4.png) 3. In the window that opens: 1. Enter an **Integration Name**, for example: *Hometown SSO*. 2. Enter your **Microsoft Entra Tenant ID**. You can retrieve this from your Microsoft Entra admin portal. 4. Click **Proceed with Entra Setup**. Enterprise Hub automatically copies a setup URL to your clipboard. 5. Select **Enable Auto Linking** for organizations with many users, auto-linking reduces manual setup. When enabled: 1. Users select **Continue with Entra** on login. 2. They authenticate with Microsoft. 3. Enterprise Hub prompts them to confirm linking. 4. After confirmation, their accounts are automatically linked. 5. If a user declines linking, they must log in using their Enterprise Hub username and password. ![Form to connect Microsoft Entra ID with setup instructions and action buttons.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-lgdk8tsi.png) 6. Open a new browser tab. 7. Paste the URL into the address bar. You are redirected to Microsoft Entra to complete the consent process. 8. Review the permission request. 9. Click **Confirm**. When the permission is granted, the connection status updates to *Active*. ## Understand connection statuses in Microsoft Entra Each connection displays a status tag: - **Pending**: Microsoft consent has not been completed. - **Active**: Connection is live and ready for user linking. - **Inactive**: Connection has been deactivated. - Deleted connections no longer appear in the list. ![Overview of Single Sign-On settings with status indicators for various services.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-szxdif1h.png) If the URL was not copied automatically, you can: - Locate the connection in the list. - Click the clipboard icon to copy the setup URL manually. ## Edit, deactivate, or delete a connection From **Settings > Single Sign-On (SSO)**, click **More** ![](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-truhwkn4.png) next to a connection. You can: **Edit** - Update the integration name. - Enable or disable auto-linking. **Deactivate** - Temporarily disables SSO for this connection. - Keeps configuration and user links. - Does not require repeating Microsoft consent if reactivated. > [!NOTE] > **Note:** Use Deactivate when troubleshooting or preparing to migrate connections. **Delete** - Deletes all configuration and user link data. - Requires full reconfiguration and consent if recreated. ![](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-ue23045e.png) ## Manage user SSO linking To manage users: 1. Go to **User Management.** 2. In the side panel, click **Security > SSO**. This screen lists all active users and their SSO status. ![User accounts listed with SSO status and email details for security configuration.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-a6gyl5il.png) ### User status indicators - **Green (Enabled):** User is linked and SSO is active. - **Red (Disabled):** User is linked but SSO login is disabled. - **Gray (Not Linked):** User has not been linked to Microsoft Entra. You can: - Search by name, username, email, or domain. - Filter by *Enabled*, *Disabled*, or *Not Linked*. ![User management interface displaying search bar and user account details with SSO status.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-r5xrlqsd.png) ## View connection details 1. Click **More** ![](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-dn1cf3xg.png) next to a user. 2. Select **Connection Details**. You can view: - Enterprise Hub user information - Microsoft Entra Tenant ID - Microsoft Entra Object ID (unique user identifier) ![Connection details including username, email, tenant ID, and object ID information.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-4wvkvny6.png) ## Disable or unlink a user From *Connection Details*, you can: **Disable** - Turns off SSO for that user. - User logs in with Enterprise Hub credentials. - Keeps the link intact. **Unlink** - Removes the Microsoft Entra association. - Logs in with their credentials - Deletes the stored Entra user data. - Requires relinking to re-enable SSO. ## Link a user If a user is not linked: 1. Click **More ![](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-meyp2bvt.png)** next to the user. 2. Select **Link**. 3. Select the appropriate Microsoft Entra organization. ![User linking interface showing options to select organization and users for ServiceTitan.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-dxv5vpj9.png) 4. Sign in with your Entra account and grant permission to list the accounts. ![Microsoft login screen requesting permissions for the ServiceTitan app access.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-dbkqyv4k.png) 5. Select the matching Entra user from the list. ![User linking interface showing options to select organization and users for ServiceTitan.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/manage-single-sign-on-sso-in-enterprise-hub-image-ju5u6sg6.png) 6. Or, manually enter the user's Entra Object ID. 7. Confirm to complete linking. When linked, the user status changes to **Enabled**. ## Want to learn more? - See [Set up Microsoft Entra ID Single Sign-On (SSO) and link user accounts](/v1/docs/set-up-microsoft-entra-id-single-sign-on-sso-and-link-user-accounts)