Skip to main content
Runway supports single sign-on for workspaces that need identity-provider controlled login. Use SSO when users with your company email domain should authenticate through your IdP instead of choosing a personal login method.

Login options

The login page offers Continue with Google, Continue with Rippling, Continue with Microsoft, Continue with Xero, and Sign in with SSO.
1

Choose SSO

Click Sign in with SSO on the login page.
2

Enter your workspace slug

Enter the slug in the form with placeholder org-url. The page shows it as app.runway.com/{slug}.
3

Continue through your IdP

Complete the login flow in your identity provider.

Enable SSO

SSO is configured by Runway. Contact support to enable SSO for your workspace and connect your WorkOS-supported IdP, such as Okta, Azure AD, or Google SAML.

IdP-initiated login

IdP-initiated login is supported. Users can start from the Runway tile in the IdP and continue into Runway.

Domain enforcement and provider pinning

SSO enforcement is based on email domain. Users with matching email domains must use SSO. Outside collaborators, such as investors with non-matching domains, can still use Google, Microsoft, or another available login method. A user who previously signed in through SSO is pinned to that provider.

FAQ

Yes. SSO enforcement is by email domain, so matching domains use SSO while outside collaborators can use another available login method.
No. Runway configures SSO for your workspace. Contact support to enable it.
Runway uses WorkOS, so WorkOS-supported IdPs such as Okta, Azure AD, and Google SAML can be connected.

What’s next