Require team members to sign in with SSO to view a private site or page.

On an Enterprise plan, you can set up single sign-on (SSO) to view your site or specific pages. You can set up SSO using authentication applications like Okta, Microsoft Entra ID, ClassLink, or Google. With this feature, you can create internal sites for your organization that are secured behind an SSO login flow. For example: 

• Your company is hosting an event, so you create a website dedicated to the event that only employees can access using your company’s SSO. 
• Your company has many different departments or teams, and you want to ensure that the right groups of people have access to the content that's created for them. You can use page-level SSO setup so different groups can access specific parts of the site. Your IT team can manage this all in your company’s SSO setup.
• You have an internal site that includes an employee newsletter or other resources that only employees can access using your company’s SSO. 

You can also customize the login screen so it matches your brand. We recommend working with your IT team to setup SSO for site and page viewing. 

This feature is for Enterprise customers only. It's not available for other plan levels. 

Add SSO credentials 

You can enter and manage your SSO credentials in your account settings. These credentials will then appear in the site availability and page settings.

Note: You can only set up ClassLink for site and page viewing if you already use ClassLink to log into your Squarespace account.

If you already have SSO set up to log into your organization, like with Okta or Microsoft Entra ID, these credentials will automatically populate in Team SSO section in the SSO manager. 

To add new credentials:

1. Open the SSO Credentials panel. 
2. Click Add SSO Credentials. 
3. Click the SSO Provider drop-down menu and select an authentication application.
4. Enter the credentials for your provider. You can find provider-specific notes in the section below. 
   1. If you’re using Okta or Microsoft Entra ID, enter the client ID and client secret that's issued by your provider in the respective field. For Google, enter the X.509 Certificate. 
   2. Enter your single sign-on URL. 
      • For Okta, use the Okta Issuer URL (https://example.okta.com).
      • For Google, use https://accounts.google.com/o/saml2/idp?idpid=XYZ.
      • For Microsoft Entra ID, Squarespace uses the tenant ID to create a unique sign-on URL to link from your Microsoft Apps dashboard. The URL will look like https://sts.windows.net/{YOUR_TENANT_ID}, with your tenant ID in place of {YOUR_TENANT_ID}. 
   3. Enter a nickname to help you identify the login method. 
5. Click Save SSO. 

You can now select these SSO credentials in your site availability settings or for a specific page. 

Set up site-level SSO

To enable SSO login to view your site:

1. Open the Site Availability panel. 
2. Select SSO protected, then click Select SSO. 
3. Select an SSO option from the SSO Credentials drop-down menu. You can also edit the text that displays on the login button. 
4. Click Save SSO. 
5. Optional: To add another SSO option, click Select Additional SSO. 

Set up page-level SSO

By default, when SSO is enabled for your site, any new pages that you add to your site are protected behind the site-wide SSO. You can select another SSO provider for an individual page, but you'll still have to log in through the site-level SSO first before logging in at the page-level. If site-level SSO isn't enabled, you only have to log in at the page level. 

This is useful if you have pages that should only be accessed by a specific team, like your HR team, or if your site is public, but you want to secure select pages behind SSO.

To enable SSO login to view a specific page on your site:

1. Open the Pages panel. 
2. Hover over the page you want to protect with SSO and click to open page settings. 
3. In the left menu, click Single sign-on.
4. If you haven’t enabled SSO, switch on the Require SSO to access page toggle. 
5. Click Select SSO. 
6. Select an SSO option from the SSO Credentials drop-down menu. You can also edit the text that displays on the login button. 
7. Click Save SSO. 
8. Optional: To add another SSO option, click Select Additional SSO. 

Provider-specific notes

Review the following notes about your authentication application to help you set up SSO login for private site and page viewing. 

Okta

To use Okta for SSO login to view private sites or pages:

• In the Admin view of your Okta organization, click Add Application.
• Search for Squarespace, then click Add.

When setting up site or pageview login with Okta in Squarespace, you’ll need to copy the client ID and client secret from Okta. 

Microsoft Entra ID

To use Microsoft Entra ID for SSO login to view private sites or pages, keep the following in mind: 

• You can add and manage the Squarespace app from portal.azure.com. 
• Squarespace needs to be added as a Custom Registration, not through the Microsoft Entra ID App Gallery. 
• In your app registration settings in your Microsoft Entra ID portal, set the redirect to:  https://login.squarespace.com/api/1/login/oauth/third-party/azure/v2/connect/sso. 
• You need to generate the client secret from the certificates and secrets tab in your app registration settings. 

When setting up site or pageview login with Microsoft Entra ID in Squarespace, copy the client ID and client secret from Microsoft Entra ID. 

Google

To learn more about using Google as an authentication app, visit Logging in with single sign-on with Google. 

ClassLink

To use Classlink for SSO login to view private sites or pages, keep the following in mind:

• You can add and manage the Squarespace app from partnerportal.classlink.com.
• Contact your Squarespace account manager to get the client ID and secret values. 

Customize the SSO login page

You can design a custom SSO login page that will appear when your team members go to view your site or pages. 

1. Open the Design panel. 
2. Click SSO Login Screen. 
3. From here, you can edit the content, background image, fonts, and colors. 

Add your company’s branding

Use the Branding & Text panel to edit the company logo or text, add a headline, or add more details in the body text. To change the logo:

1. In the SSO Login Screen panel, click Content. 
2. Below the logo image, click Replace, then select Upload file to upload a new image from your drive, or Select from library to add an existing image. 
3. Click Save. 

You can also edit the original logo image using the built-in image editor. 

Add a background image or video

Use the Background panel to add a background image, video, or color for your login page. Click Images or Video to upload media for the background display. 

Keep in mind:

• Properly format your images before uploading.
• You can use the built-in image editor to edit the original images.
• You can upload multiple images to create a slideshow or grid background. SSO login screen slideshows transition between images automatically.
• Uploading many high-resolution images can affect your login page's load time.
• Images and videos will always crop to some degree, especially on mobile, because of responsive design. The amount of cropping depends on the height of the image and the width of the browser.

To display a plain background color, select None, then change the background color in the Style panel. 

Style the login screen

Use the Style panel to edit the login page’s colors and fonts. These styles are separate from the rest of your site styles, so making edits here won’t affect the other pages on your site. 

1. Click Styling. 
2. Use the styling options to edit the login page appearance. As you make changes, a page preview will display on the right side of the screen. 
3. When you’re done, click Save. 

Test the SSO login

To test the SSO login flow:

1. Open your site or page URL in an incognito window, or log out of Squarespace first, then open the site or page. 
2. Click Login with [SSO provider]. 
3. Enter your login information to access the site or page. 

If you test this and can't access your site or page, contact your Squarespace account manager with any questions. You may be directed to your IT person or SSO provider depending on the issue. 

Remove SSO credentials

To remove SSO credentials from your site availability settings or an individual page’s settings:

1. Open the Site Availability panel, or open the Pages panel and click Single sign-on. 
2. Click to expand the SSO details for the instance you want to delete, then click Remove Instance. 
3. Click Remove. 

You can no longer use this login method to view your site or pages. If the SSO login instance isn't being used anywhere in your account, you can remove it from the SSO Manager:

1. Open the SSO Credentials panel. 
2. Click the SSO instance to remove, then click Permanently Delete.