Source
Permissions, SSO & administration — found from sitemap — Notion Wikis
Checked for Notion Wikis on 1 Nov 2026
- Page
- https://www.notion.com/help/saml-sso-configuration
- Checked
- 1 Nov 2026, 09:32 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:ca1925a17d92dd139e66782488dbe1faa50a37699c6c5604ac414e00613294b0
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
SAML SSO plans Report an error
“This feature is only available for users on the Business Plan or Enterprise Plan.”
-
SAML standard Report an error
“Your Identity Provider (IdP) must support the SAML 2.0 standard.”
-
SAML domain verification required Report an error
“At least one domain must be verified by a workspace owner.”
-
SAML guests excluded Report an error
“Only workspace members can use SAML SSO to log in. Guests invited to pages in a SAML-enabled Notion workspace can’t log in with SAML SSO.”
-
SAML configs enterprise limit Report an error
“An organization can have up to 25 SAML configurations. There’s no limit on how many domains you verify.”
-
SAML configs business limit Report an error
“A Business plan workspace uses one SAML configuration. If you need more than one identity provider, you must upgrade to the Enterprise plan.”
-
SAML enforce login method Report an error
“If you want to ensure that members can log in using only SAML SSO and no other method, go to your SAML SSO settings and update the Login method to Only SAML SSO.”
-
SAML owner email bypass Report an error
“Organization owners and workspace owners can still sign in with an email and password if a provider isn’t working.”
-
SAML SSO bypass roles Report an error
“If a SAML configuration is managed at the organization level, only organization owners will be able to bypass SSO. If a SAML configuration is managed at the workspace level, only workspace owners will be able to bypass SSO.”
-
SAML workspace authorization enterprise Report an error
“This feature is only available to users on the Enterprise Plan. Domain verification is not required to enable this feature.”
-
SAML jit provisioning Report an error
“Notion supports Just-in-Time provisioning when using SAML SSO. This allows someone signing in via SAML SSO to join the workspace automatically as a member.”
-
SAML configuration change permissions Report an error
“Only organization owners, and admins who already manage SAML, can add or change configurations. Members can’t.”
-
SAML domain subdomains Report an error
“A parent domain does not cover its subdomains. Verify each domain and subdomain you want to send to a provider, then add it to a configuration.”
-
SAML domain org exclusive Report an error
“An email domain can belong to only one Notion organization. Two organizations can’t share it.”
-
SAML config acs URL Report an error
“The Assertion Consumer Service (ACS) URL needs to be entered in your Identity Provider (IdP) portal.”
-
SAML idp details input Report an error
“The Identity Provider Details is a field in which you need to provide either an IdP URL or IdP metadata XML.”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The Engineering Lead Permissions, SSO & administration
- The IT Administrator Permissions, SSO & administration
- The Operations Lead Permissions, SSO & administration
- The Quality Manager Permissions, SSO & administration
- The Skeptic Permissions, SSO & administration
- The Support Knowledge Manager Permissions, SSO & administration