Remove single sign-on
If you’d like your workspace to go back to using Slack’s built-in authentication, or switch to a different identity provider (IDP), you can turn off single sign-on (SSO).
When SSO is turned off, members will sign in using their email address and Slack password.
Turn off SSO
- Click your workspace name in the top left to open the menu.
- Select Workspace Settings. This will open your workspace site.
- From the Authentication tab, click the orange button to Disable Google Auth or Switch to built-in authentication if you’re using SAML authentication.
Members will be sent an email to let them know about the change and to remind them to set a password if they don’t already have one.✨
Switch to a different IDP
Once you’ve turned off your existing authentication method, you can switch and set up a new connection. Here are some helpful tips to consider:
Plan ahead
- Plan to make the SSO changes within a short period of time.
- Consider whitelisting the slack.com domain, so emails don’t get caught in your ISP's Spam or Junk mail folders.
- Make sure that the email addresses in Slack match with the primary email addresses in your IDP. This creates a more seamless experience for members the next time they need to authenticate, and connect their Slack account to your IDP.
Communicate the change
- Let members know about the changes and what to expect in advance by making a global announcement in your #general channel. Since you’re switching to a new IDP, let members know they can ignore the email that prompts them to create a password.
Reconnect members
- After you’ve set up the new authentication method, ask members to click the SSO binding email within 72 hours. Administrators can always send a fresh binding email from the Members page.
Who can use this feature?
- Only Workspace Owners can access this feature.
- Available to workspaces on the Standard and Plus plans.