Update
•April, 2025
Enforce SSO login for your company
Companies using single sign-on can now require it for every login, and sign-in itself is safer with your device's own secure browser.
Update
If your company uses SSO (single sign-on) to manage who can log in, you can now make it mandatory, and login itself just got more secure on iOS and Android.
Require SSO for your domain
Admins can turn on SSO enforcement for their company's email domains. Once enabled, anyone signing in with an email on that domain is sent through your identity provider instead of Toolbee's own password or passwordless login, so access always follows your company's own rules for who's allowed in.
A more secure sign-in flow
SSO logins on iOS and Android now open in your device's own secure system browser instead of an in-app window. This is the flow recommended by identity providers: it's harder to intercept, it can reuse sessions you're already signed into, and it makes it clear you're on your provider's real login page.
More reliable sign-in overall
We also fixed a race condition between Firebase authentication and ID token refresh that could occasionally get login stuck, and added automatic retries so a flaky connection doesn't leave you staring at a spinner.
Want SSO enforced for your company?
Reach out and we'll help you set it up. support@toolbee.com
