Skip to the content
Docs
Open Facet
Account

Company sign in

Let everyone at your company sign in to Facet with their work account, through Okta, Entra ID, Google Workspace or any SAML identity provider.

Part ofRadiance

With company sign in, everyone with an address at your domain signs in to Facet through the identity provider your IT team already runs: Okta, Microsoft Entra ID, Google Workspace, OneLogin, JumpCloud, or anything that speaks SAML 2.0. No emailed links and no new passwords.

What your people see ​

They type their work email on the sign in page. As soon as they are past the @, the page becomes your company's: your logo takes the place of Facet's mark, with a small Facet mark kept beside it. They press the button, sign in with your provider as they do everywhere else, and arrive in Facet. A first sign in creates their account on the way through.

To send people straight to your company's sign in page, share:

https://use.facet3d.studio/login?sso=yourcompany.com

Set it up ​

Company sign in is set up by a workspace owner on Radiance, in Settings, Company sign in. If the section says it is not switched on for your account yet, write to support@facet3d.studio and we will set it up with you.

  1. Add your domain. Type it, for example acme.com, and press Add domain.
  2. Prove the domain. Add the DNS record Facet shows you, a TXT record, at your DNS provider, then press Check. DNS can take a few minutes to update.
  3. Connect your provider. Create a SAML app in your identity provider using the ACS URL and Entity ID Facet shows you. Then paste its metadata URL back into Facet, or paste the metadata XML instead.
  4. Make it yours. Add your company name and Upload logo. Use Test sign in to try it.

Require it ​

Only allow sign in through your provider is a separate switch, and it starts off. With it on, emailed links and Google sign in stop working for your domain, and anyone at your domain is sent to your provider. Leave it off while you test, so nobody is locked out by a mistake.

Looking after it ​

  • Read metadata again picks up a new certificate from your provider. Nothing has to be set up again.
  • Turn off stops company sign in, and lets people use emailed links again.
  • Remove domain stops company sign in for everyone at that domain. The DNS record has to be proved again if you add it back.

Turning it off or removing the domain also turns off Only allow sign in through your provider, so nobody is left without a way in.