0%

How to set up Single Sign-On (SSO) for Companies, Law Firms, and Finance Firms

How to set up Single Sign-On (SSO) for Corporations, Law and Finance Firms, or LLCs

Single Sign-On (SSO) allows company administrators to log into Carta using their organization's identity provider (IdP). This enhances security and simplifies user management.

Eligibility and availability

Currently, SSO is available for:

  • Corporations on the Scale plan (included) or as a paid add-on on other plans

  • Law firms

  • Finance firms

  • LLC companies using the LLC product

  • Fund administration firms

How to implement SSO for corporations and Law Firms (self-service)

  1. Navigate to the People page (for Law Firms)

or

  1. Navigate to Company settings → Users and permissions (for corporations).

  1. Full access users will see a Setup SSO button.

  2. Click Setup SSO to open the setup modal.

  1. Enter your IT administrator's email address where the SSO setup link should be sent

  2. Confirm:

    • The email address is correct

    • You understand this only provides access to setup SSO and does not grant access to your organization on Carta

  1. After sending, you'll see a confirmation banner showing where the invitation was sent

Once your IT administrator receives the SSO setup link email, they'll complete the following steps:

  1. Access the SSO Setup Portal using the link in the email

  2. Click Get stated with domain verification

  3. Verify your organization's domains

    • Multiple domains can be verified by repeating this step

  1. After verification syncs, either:

    1. Return to Carta to complete remaining steps

    2. Verify another domain

  1. Click Next: SSO Setup to proceed, then Get started with SSO Setup.

  2. Select your identity provider (examples: Okta, Azure, OneLogin).

  3. Follow the guided steps specific to your identity provider.

  1. Configure SCIM to automatically deprovision users when they're removed from your identity provider.

After all steps are complete:

  • IT administrator sees a confirmation page

  • Full access users see a new banner on the users page confirming SSO management

  • Users must be added or removed through your identity provider

Once users are added to your identity provider:

  • They must first log in using SSO at https://login.app.carta.com/sso/login/ or through the Carta tile in your identity provider dashboard. Only then will they appear on the People page

  • Full access users can continue to modify permission levels through the People page

12%