Get early access
In this section (15)

Sign in with Google or Microsoft

Let agents sign in with their Google or Microsoft work account, and limit it to your company domains.

2 min read

Agents can sign in with their Google account or their Microsoft work or school account instead of a password. Admins choose which of the two are allowed.

Nobody gets an account this way. Agents are still invited first.

Turn it on

  1. Open Admin Center, Security & compliance, Single sign-on.
  2. In Google and Microsoft sign-in, switch on Sign in with Google, Sign in with Microsoft or both.
  3. Optional: under Company domains, list your domains and choose Save domains.

The sign-in page then shows Sign in with Google and Sign in with Microsoft.

Company domains

With company domains set:

  • Google accepts only Google Workspace accounts of those domains. A personal Gmail account is refused, even when its address is on your domain.
  • Microsoft accepts only accounts whose address your organisation has verified on one of those domains.

Without domains, any Google account with a verified address, and any Microsoft work or school account, can sign in, as long as an agent with that address exists in your workspace.

Personal Microsoft accounts (such as outlook.com) are always refused.

How agents are matched

The first time, ChaosDesk finds the agent in your workspace with the same verified email address and links the account. Later sign-ins use the link, so an address change at Google or Microsoft does not lock the agent out.

A Google or Microsoft account only signs in to the workspace where the agent was invited. It never opens another workspace.

Two-step verification

ChaosDesk does not ask for its own second step after signing in with Google or Microsoft. Turn on two-step verification in your Google or Microsoft account.

SSO only

If you switch on SSO only for OpenID Connect or SAML, Google and Microsoft sign-in stop working too, except for break-glass admins.

Signing up

New customers can also create a ChaosDesk workspace with Continue with Google or Continue with Microsoft on the sign-up page. They skip the password and the emailed code, because the provider already verified the address.

Was this article helpful?