Does Procore Single Sign-On (SSO) support single or multi-domain setups?
Background
Single Sign-On (SSO) allows your team members to log in to Procore using your organization's centralized identity provider credentials. Configuring your login domains ensures that users are automatically directed to the correct authentication portal based on their email address. This setup provides secure access while streamlining the sign-in experience for your entire organization.
Answer
Yes. Procore SSO supports both individual domains and multiple domains.
Single Domain: All Procore users logging in via SSO use email addresses from a single domain. For example:
@example.comMultiple Domains: Your organization uses different email domains across teams, regions, or subsidiaries. For example:
Headquarters:
@example-hq.comEast Coast offices:
@example-east.comWest Coast offices:
@example-west.com
Request Requirements
Before requesting domain configuration from Procore, verify that you meet the following requirements:
User Role: You must be a designated Procore Administrator for your organization.
Domain Ownership: You can only request domains that your company owns and manages within your Identity Provider directory (such as Okta, OneLogin, or Microsoft Entra ID).
Domain Restrictions: Public or third-party webmail domains (such as
@gmail.comor@yahoo.com) cannot be configured for SSO authentication.
Submit a Domain Configuration Request
After configuring your SSO solution in your identity provider, contact Procore Support or your Procore point of contact to complete the domain setup. Procore completes this final routing step to activate authentication for your specified domains. For setup instructions, see How do I set up Single Sign-On with Procore?