On a paid plan or after buying credits, admins can connect the company’s identity provider (Okta, Microsoft Entra ID, Google Workspace, OneLogin and others): Settings, Single sign-on. Prove the email domain with a DNS record, add xMap Flows as a SAML app in the provider, paste its sign-in address and certificate, and switch it on.
People sign in with Use company sign-on on the sign-in page. New people at the domain can join as members on their first sign-in, and admins can require it, so passwords and Google or Microsoft sign-in stop working for the domain.