How to configure a custom Single Sign On log-in experience

This article explains how to set up a custom Cognism SSO so users can log in using your identity provider rather than a username and password. 

By configuring authentication methods and SSO options, you can control how users log in, improve security, and streamline access across your organisation.

Prerequisites

Before you start, you must:

• Be a Cognism admin
• Have admin access to your identity provider (for example, Okta or Microsoft Entra ID)
• Decide whether users should be allowed to log in using SSO only, or both SSO and email/password

Open Single Sign-On settings

1. In Cognism, click Settings.
2. Select Single Sign-On from the left-hand menu.

Choose an authentication method

Under Authentication, choose how users can log in:

• Allow all authentication methods – users can log in using SSO or username and password.
• Allow SSO authentication only – users must log in using SSO. Email and password login is disabled.

Important: If you select Allow SSO authentication only, all users will be forced to log in using the configured SSO methods.

Configure an SSO method

Cognism supports the following SSO methods:

• Okta SSO
• Microsoft Entra ID SSO
• Custom SSO

To configure an SSO method:

1. Find the SSO method you want to use.
2. Click Configure.

Follow the on-screen configuration steps

When you click Configure, Cognism shows a step-by-step configuration modal.

The exact steps depend on the SSO method you select. For Microsoft Entra ID, you will:

1. Copy the Identifier (Entity ID) from Cognism and paste it into Microsoft Entra.
2. Copy the ACS URL from Cognism and paste it into Microsoft Entra.
3. Paste the Entity ID from Microsoft Entra into Cognism.
4. Paste the X.509 certificate from Microsoft Entra into Cognism (exclude the BEGIN and END certificate text).

Follow the instructions shown on screen carefully and complete each step in order.

Save the configuration

Once all required fields are completed:

1. Click Configure.
2. Confirm the SSO method appears as configured on the Single Sign-On page.

Expected results

After configuration:

• Users can log in to Cognism using your identity provider
• Login behaviour follows the authentication method you selected
• SSO settings apply to all users in the organisation