SAML

Overview

With Shortcut SSO, your team can manage how users access Shortcut through your Identity Provider. SSO is available as an add-on for paid plans and included with Enterprise plans.

For plan details, see the Pricing page.

Supported Identity Providers

Shortcut supports various IdP clients including:

  • Okta
  • OneLogin
  • Google Workspace
  • Microsoft Entra ID

Contact support if you have questions about a specific IdP your team uses.

Setting Up SAML SSO

  1. Contact support@shortcut.com to start the process
  2. Provide your IdP information (this helps us provide correct configuration details)
  3. Our team will provide SAML configuration settings
  4. Configure your IdP with the provided settings
  5. Test the connection

For Enterprise plan customers, setup can be completed quickly.

Logging In with SSO

Two methods are available:

  1. IdP-initiated login - Use your Identity Provider’s login link
  2. Shortcut SSO page - Go to app.shortcut.com/sso and enter your Organization URL slug

Important Notes

User Account Requirements

  • All users must have a Shortcut account with the email address used in your IdP
  • Without SCIM provisioning, users must first create a Shortcut account by:
    • Being invited by an Admin via email or invite link
    • Joining via “auto-join by email domain” if enabled

SCIM Provisioning

SCIM provisioning is currently only supported via Okta. See SCIM for more details.

Mandatory SSO

SSO can be enforced as the only login method. Requirements:

  • Users associated with your Organization cannot be in another Shortcut Organization
  • Contact support to enable or disable mandatory SSO

Session Duration

  • Default session duration: 12 hours
  • Can be adjusted by contacting support