Added

[Aug 12, 2026] Enterprise Single Sign-On

Enterprise Single Sign-On can now be provisioned for an organization, letting members sign in through their company identity provider with an identity-first login experience. Provisioning is handled by Baselayer operators through an internal admin flow during onboarding.

With just-in-time (JIT) provisioning enabled, a brokered login from an email we haven't seen before creates the user automatically with the standard member role. Organization admins can adjust roles in-app afterward.

No integration changes required. Contact your Baselayer representative to enable Single Sign-On
for your organization.