Can I log into the Procore Web application directly if my company has implemented SSO?
Answer
Yes, if SSO is configured as IdP-Initiated. If your company has integrated an SSO solution with your Procore environment that is IdP-Initiated, users can still log into the Procore web application from the Procore login page. Procore supports two types of SSO solutions: SP-Initiated and IdP-Initiated SSO. The login experience will be different depending on which solution has been configured.
Service Provider Initiated (SP-Initiated) SSO
Referred to as Procore-initiated SSO, this option gives users the ability to sign in from the Procore login page without using a Procore password. Upon entering an email address containing a domain targeted for SSO authentication on the Procore login page, the password box disappears. Then, when clicking Log In, the SSO integration redirects users to the login page for their Identity Provider (IdP). Once the the user enters their credentials there and their identity is authenticated within the IdP, the user is redirected back to and logged into, Procore.
Identity Provider Initiated (IdP-Initiated) SSO
If IdP-initiated SSO has been configured, end users can log in by first navigating to their Identity Provider (for example, Microsoft Azure or Okta). From there, users can click a Procore tile to automatically log into and open the Procore web application. With this option enabled, users can also choose to log into Procore directly from the Procore Login page with a username and password.
Important
If your company has configured SP-Initiated SSO for Procore, you will not be able to reset your password from the Procore login page because your password is managed in your company's SSO software. Password changes or forgotten passwords will need to be handled by your company's internal IT team.
If you're not sure if you log into Procore using SSO, you should reach out to your company's IT team or your Procore Administrator for confirmation.