How Do I Create Users with Single Sign-On?
Last updated: November 14, 2026
When single sign-on (SSO) is enabled, employees can log in to Ambition through your identity provider (IdP) instead of with an Ambition password. Unless Just-In-Time (JIT) provisioning has been enabled, every employee will need an active Ambition account before they log in for the first time.
Required permissions:
The Users: Create permission is required to create users.
The Users: Delete: Can Delete All Users permission is required to deactivate any user.
Required features:
The SAML/SSO feature is required to log in with single sign-on.
Add Users Before They Log In
Assign the employee to the Ambition app in your IdP.
In Ambition, go to Admin --> People --> Users and click on Create New User.
Enter the same work email the person uses in your IdP in the Email field. The email addresses are not case-sensitive.
Fill in the rest of the form, leave the Invite Upon Creation box checked, and click on Create User.
What Does the Sign-In Process Look Like for Users?
The Activate Account button in the invitation email will take the user straight to Ambition, where they'll sign in through your IdP. They won't be asked to set a password.
Note:
If a user sees "User not found in ambition user directory" when logging in, no active Ambition user has their IdP email. Create the user or correct their email, or turn on Just-In-Time Provisioning.
Each email can belong to only one active Ambition user. If two users share an email, neither will be able to log in until one is changed.