Company SSO
Company SSO
Company single sign-on (SSO) lets you sign in to DOE with your work account.
If your company uses SSO and SCIM, your company manages everything about your access: who can use DOE, passwords, MFA, sign-in rules, account details, workspace and role access, and when access is added, suspended, removed or restored.
Njord supports the connection to DOE. Njord does not approve individual access, reset company passwords, bypass company MFA or manage people in your company directory.
Before your first sign-in
You need:
- your work email,
- an active company account,
- your company's security checks, and
- confirmation from your company administrator that your DOE access is ready.
Use the same work email everywhere. Do not create a second DOE account if you already have one.
When your company uses both SSO and SCIM, a separate DOE invitation is normally not needed. Your company administrator gives you access through the company system.
Sign in with company SSO
- Open the DOE sign-in page.
- Choose Sign in with SSO.
- Enter your work email.
- Complete your company's login and security checks.
- Return to DOE.
Always use Sign in with SSO when your company has told you to use company SSO.
What your company manages
Your company is responsible for:
- deciding who can use DOE,
- passwords, MFA and other sign-in rules,
- adding, updating, suspending, removing and restoring access,
- your company-managed name and work email,
- deciding which DOE workspace and role you should have, and
- reviewing access when someone changes role or leaves the company.
Your company's DOE administrators decide workspace and role access. Company groups can help administrators organize access, but they do not automatically give someone a DOE role.
Add someone
This is completed by your company administrator:
- Add the person to DOE through the company access system.
- Use the person's correct work email.
- Choose the intended DOE workspace and role.
- Wait until the account is ready.
- Ask the person to choose Sign in with SSO.
If the person already has a DOE account with the same work email, keep that account. Do not create a duplicate.
Change or restore access
Make the change through your company access system. This includes changes to a person's name, work email, account status or DOE access.
After the change:
- Confirm that the company system shows the correct details.
- Confirm that DOE shows the intended workspace and role.
- If access was restored, ask the person to sign in with the same work email as before.
Changes may not appear immediately. Your company administrator should confirm that the update completed before asking Njord for help.
Remove access
For someone leaving the company or needing access removed urgently:
- Disable the person's company account or remove their DOE access.
- Confirm that the person can no longer open DOE.
- Contact Njord immediately if access remains after the company change has completed.
Removing access does not require a new account if the person returns later. Your company administrator can restore the existing account.
If something does not work
| What happens | What to do |
|---|---|
| Your company login blocks you | Ask your company's IT or identity team to check your account, MFA and sign-in rules |
| DOE cannot find your company | Confirm your work email with your company administrator, then ask Njord to check the connection |
| Company login works but DOE blocks access | Ask your company administrator to check your DOE access, workspace and role |
| DOE asks for an invitation | Ask your company administrator to confirm that your SSO and SCIM access is ready; do not create another account |
| A change has not appeared in DOE | Ask your company administrator to confirm that the company update completed |
| DOE says an account already exists | Use the existing account and exact work email; do not create a duplicate |
| Restored access still does not work | Ask your company administrator to confirm that the existing account, workspace and role were restored |
| Removed access still works | Ask your company administrator to remove it again and contact Njord immediately |
A DOE password reset cannot change a company SSO password, bypass company MFA or restore a company-managed account.
What Njord can help with
Contact Njord after your company administrator has checked the account and access.
Njord can help when:
- DOE cannot find the company connection,
- sign-in fails between your company login and DOE, or
- a completed company access change still does not appear in DOE.
Njord cannot decide who should have access, change your company account, reset your company password or weaken your company's MFA rules.