Tallyfy includes free Single Sign-On (SSO) for all paid plans. Your team logs in with existing corporate credentials from Microsoft Entra ID, Google Workspace, Okta, OneLogin, JumpCloud, or any SAML 2.0 provider. Setup takes about 30 minutes.
You can also enforce SSO-only access - blocking email/password logins entirely.
SSO benefits
Benefit
What it means
Security
Apply your org’s existing security policies and MFA to Tallyfy
One login
Team members use their corporate username and password
Access control
Manage Tallyfy permissions from your identity provider
Auto-provisioning
New users get Tallyfy accounts on first SSO login
Consistent policies
Same password complexity and session rules across all systems
Less IT overhead
No more Tallyfy-specific password resets
SSO as replacement for e-signatures
SSO authentication creates audit trails that can replace e-signature tools for internal approvals.
Why skip traditional e-signatures for internal use?
Extra cost per signature/user
Separate system to manage
Workflow interruption - users leave Tallyfy, sign elsewhere, then return
SSO-based approvals give you:
No extra cost - included with paid Tallyfy plans
Identity verification - corporate SSO confirms the approver’s identity
Audit trail - every approval logged with timestamp and user identity
No context switching - approvers complete tasks without leaving Tallyfy
Legal compliance - meets requirements for internal corporate approvals in most jurisdictions
Common use cases: purchase orders, policy acknowledgments, budget authorizations, project sign-offs, compliance confirmations, HR approvals.
Enforcing SSO-only access
Tallyfy can lock down your org so SSO is the only login method. When sso_auth_only is enabled:
Email and password logins are disabled org-wide
Manual member invites are blocked - all users must come through your identity provider
Non-SSO login attempts redirect to your SAML login page
Your IT team configures the identity provider side
Test with users from different departments and roles
Tell your team about the new login process
Troubleshooting authentication issues
Authentication loops
If you’re stuck in a login loop or can’t get past the login screen, visit https://account.tallyfy.com/logout ↗ to clear all sessions. Then clear your browser cookies for tallyfy.com, wait 10-15 seconds, and log in again.
Tallyfy integrates with Microsoft Entra ID (formerly Azure Active Directory) for SAML-based single sign-on by having an admin create an enterprise app in Entra ID and exchange SAML configuration values and certificates with Tallyfy Support so that users can log in automatically and get accounts provisioned on first access.
SSO integration with MCP servers eliminates repeated authentication across multiple AI tools by delegating login to enterprise identity providers like Azure AD or Okta through OAuth 2.1 flows so users authenticate once with corporate credentials and gain access to all approved workflow integrations while giving IT centralized control over token management and access policies.
Tallyfy integrates with OneLogin through SAML-based Single Sign-On by having an admin create a custom SAML connector in OneLogin and exchange configuration values like ACS URLs and X.509 certificates with Tallyfy Support so that team members can authenticate through a special SSO login URL with automatic provisioning for new users on first access.
Tallyfy integrates with Okta through SAML 2.0 SSO by creating an Okta SAML app and exchanging configuration details with Tallyfy Support so users can authenticate automatically and get accounts provisioned on first login in about 30 minutes.
