Single Sign On (SSO)

Glean supports different ways for users to create their account and sign-in:

Using a unique Password created just for Glean (the default option)
Using Google SSO
Other SSO Providers (SAML 2.0)

See our SSO FAQ for more information.

Google SSO

You can enable Google SSO through your Glean Admin Portal. See here for more details: https://help.glean.co/article/53-enabling-google-single-sign-on

Other SSO Providers (SAML 2.0)

Other SSO providers need to be manually configured both on your side and ours. You'll likely need help from your IT team to get this configured.

The following article goes through the steps to get SSO set up on your account. The first step is to send us your Identity Provider information detailed in Section 1: https://help.glean.co/article/320-sso-setup-guide

You can send this information to your Customer Success Manager, or support@glean.co and we can start setting up SSO on your account.

Important - Users still have to be manually invited to create an account before they can use Glean (unless you have 'Just in Time' enabled - see below)

FAQ

What is Single Sign-On (SSO)?

SSO is an authentication method that enables users to securely authenticate with multiple applications and websites by using just one set of credentials. For Glean, this essentially means that users can log-in using their organisation credentials rather than relying on separate login details for Glean.

Do you support Just In Time provisioning (JIT)?

Yes, but this option is only availble to our Site Wide customers. Please speak with your Customer Success Manager, or our support team, if this is something that you would like to use.

What is Just in Time Provisioning (JIT)?

Just in Time provisioning allows you to give access to Glean to large groups of users, without the need to manaully invite them through the Admin Portal. You create groups of users within your own identity provider system, and these users will be able to create a Glean account without an invitation. This makes it really easy when you're deploying Glean accross your whole organisation. Please note that we don't currently support automatic de-provisioning.

Do you support automatic de-provisioning of users?

No, we don't currently support de-provisioning of users. To remove access to Glean you still need to use the Glean Admin Portal.

What providers do you support?

We should be able to support any SAML 2.0 identity provider.

We've previously setup Microsoft Azure (Entra ID), ADFS, Cirrus Identity, Duo, Google Workspace, Ping Federate, QuickLaunch and Shibboleth. But please get in touch even if your provider isn't listed here.

How does SSO benefit me and my students?

We all have too many usernames and passwords. Taking advantage of SSO means that your students will be able to sign up and sign in to Glean with their organisation-issued credentials. Hopefully, fewer passwords + easier access = better student adoption!

We don't use SSO here, is this a problem?

Not at all! Single Sign-On is an additional option; students can always sign up by creating a Glean-specific password.

What if a student forgets their Glean password?

There is a Forgotten Password link on the Glean sign in page which students can use to set up a new password if they forget their Glean credentials. This is an automated process which takes just a couple of minutes.