If your SSO provider isn’t explicitly listed as supported in Glean, you can still configure SSO using the SAML parameters outlined in this guide. Single Sign-On (SSO) enables users to access multiple applications with one set of login credentials.

​
Prerequisites

Before beginning the setup process, ensure you have:

  • An active administrator account in your SSO provider
  • Access to your Glean admin account with Admin or Setup Admin roles
  • Basic understanding of SAML 2.0 and SSO concepts

Glean limits SSO authentication to pre-approved domains. Ensure that you have notified Glean of all domains that will be used for user authentication (e.g., company.com, company.co.jp, subsidiary.co) or SSO will fail.

​
SSO Provider Configuration

1

Create a new SAML App

Create a new SAML application in your SSO provider’s management console.

You’ll need your tenant ID and/or tenant backend domain (format: tenant_name-be.glean.com). You can find your tenant ID by following the instructions here. Contact Glean support if unsure.

Configure the following fields (some may not be required by your provider):

FieldValue
Single Sign-On (SSO) URLhttps://tenant_name-be.glean.com/authorization-code/callback
Recipient / Destination URLhttps://tenant_name-be.glean.com/authorization-code/callback
ACS (Consumer) URLhttps://tenant_name-be.glean.com/authorization-code/callback
Audience URI (SP Entity ID)https://tenant_name-be.glean.com
Default RelayStateLeave blank
Login URLhttps://tenant_name-be.glean.com/login
Logout URLhttps://tenant_name-be.glean.com/logout
SAML initiatorService Provider (Glean)
SAML signature elementAssertion
Name ID formatemailAddress
Sign requests?True
X.509 signatureStandard Strength Certificate (2048-bit)
X.509 signature algorithmSHA-512
2

Copy the IdP Metadata XML URL

Glean requires a publicly accessible IdP Metadata XML URL to configure SSO. Direct XML file uploads are not supported.

​
Glean Configuration

1

Configure SAML

  1. Navigate to Workspace Settings > Setup > Authentication
  2. Select Okta SAML from the SSO Providers list

You can use this option for any SAML provider - not just Okta.

  1. Paste your SAML Metadata URL into the Okta metadata URL field

The SAML Metadata URL must be publicly accessible. Contact Glean support if you need assistance with hosting.

  1. Click Save
2

Activate SSO

  1. Return to Authentication Settings
  2. Click Switch to Okta SAML SSO
  1. Confirm the switch
  2. Verify the status shows as Connected

If you don’t see the switch button, your Glean tenant may still be provisioning. You can proceed with connecting datasources and return later.

​
Testing the Configuration

To verify your SSO setup:

  1. Open a new Incognito or Private Browsing window
  2. Navigate to https://app.glean.com
  3. Enter your work email and click Log In
  4. Verify successful redirection to your SSO provider

Always test using a Private Window to ensure browser cache and existing sessions don’t affect the results.

Test both SSO phases

Two key phases need testing:

  1. Glean to SSO provider redirect
  2. SSO provider back to Glean redirect

If either phase fails, verify your configuration settings and ensure all domains are approved by Glean.

Was this page helpful?