[{"data":1,"prerenderedAt":432},["ShallowReactive",2],{"docs-team-lead\u002Fmanaging-your-team\u002Fsso-setup":3},{"article":4,"sectionArticles":242,"categories":409,"relatedArticles":430,"prevArticle":349,"nextArticle":353,"categoryName":424,"error":431},{"id":5,"title":6,"avatar":7,"body":8,"description":234,"docx":7,"extension":235,"meta":236,"navigation":237,"order":7,"path":238,"pdf":7,"pdfLabel":7,"procurementPack":7,"seo":239,"slug":7,"stem":240,"__hash__":241},"content\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fsso-setup.md","SSO Setup",null,{"type":9,"value":10,"toc":221},"minimark",[11,15,19,28,33,38,93,97,104,108,111,123,126,130,133,146,150,197,201],[12,13,6],"h1",{"id":14},"sso-setup",[16,17,18],"p",{},"Single Sign-On (SSO) lets team members sign in to HeadshotPro using their corporate identity provider — Entra ID, Okta, Google Workspace, or any SAML-compatible IdP. Once active, you can enforce SSO organization-wide and optionally allow anyone with a verified domain email to join without a manual invite.",[16,20,21,22,27],{},"SSO is an enterprise add-on. Contact ",[23,24,26],"a",{"href":25},"mailto:sales@headshotpro.com","sales@headshotpro.com"," to have it activated for your organization.",[29,30,32],"h2",{"id":31},"how-it-works","How it works",[34,35,37],"h3",{"id":36},"initial-setup","Initial setup",[39,40,41,50,61,84,87],"ol",{},[42,43,44,45,49],"li",{},"Go to ",[46,47,48],"strong",{},"Admin > Settings > Security",".",[42,51,52,53,56,57,60],{},"Locate the ",[46,54,55],{},"Single Sign-On (SSO)"," card. The status badge shows ",[46,58,59],{},"Disabled"," until setup is complete.",[42,62,63,64,67,68],{},"Click ",[46,65,66],{},"Enable SSO",".\n",[69,70,71,77],"ul",{},[42,72,73,74,76],{},"If SSO has not been activated for your account, a dialog appears prompting you to contact sales. Email ",[23,75,26],{"href":25}," to request activation.",[42,78,79,80,83],{},"If SSO is activated, HeadshotPro provisions a WorkOS organization and opens the ",[46,81,82],{},"SSO configuration portal"," in a new tab.",[42,85,86],{},"In the configuration portal, connect your identity provider by following the on-screen instructions. The portal supports SAML 2.0 and OAuth-based providers.",[42,88,89,90,49],{},"Complete the portal steps and close the tab. HeadshotPro detects the completed setup and updates the SSO status to ",[46,91,92],{},"Enabled",[34,94,96],{"id":95},"reconfiguring-sso","Reconfiguring SSO",[16,98,99,100,103],{},"After SSO is enabled, click ",[46,101,102],{},"Configure SSO Settings"," on the SSO card to reopen the configuration portal. Use this to update certificates, rotate metadata, or change the IdP connection.",[34,105,107],{"id":106},"enforce-sso","Enforce SSO",[16,109,110],{},"When enabled, users whose email domains match a verified domain cannot sign in with email\u002Fpassword or social (Google, LinkedIn) logins — they must authenticate through SSO.",[39,112,113,120],{},[42,114,115,116,119],{},"Toggle ",[46,117,118],{},"Require SSO login"," on the SSO card.",[42,121,122],{},"The change takes effect immediately. Users already logged in are not affected until their session expires.",[16,124,125],{},"Disable this toggle if you need to allow mixed authentication temporarily (e.g., during migration or for service accounts).",[34,127,129],{"id":128},"jit-provisioning-auto-join","JIT provisioning (auto-join)",[16,131,132],{},"Just-in-time (JIT) provisioning automatically creates a HeadshotPro account and adds a user to your organization the first time they authenticate via SSO, without requiring a prior invitation.",[39,134,135,140,143],{},[42,136,115,137,119],{},[46,138,139],{},"Auto-join (JIT Provisioning)",[42,141,142],{},"When active, anyone with an email on a verified domain who authenticates via your IdP is provisioned instantly.",[42,144,145],{},"When inactive, users must be invited through the Members section before they can sign in via SSO.",[29,147,149],{"id":148},"good-to-know","Good to know",[69,151,152,157,167,170,175,178,185],{},[42,153,21,154,156],{},[23,155,26],{"href":25}," to discuss pricing and have it activated for your organization.",[42,158,159,160,166],{},"SSO is backed by ",[23,161,165],{"href":162,"rel":163},"https:\u002F\u002Fworkos.com",[164],"nofollow","WorkOS",". The configuration portal is WorkOS-hosted and opens in a new tab.",[42,168,169],{},"Verified domains are managed inside the WorkOS portal, not inside HeadshotPro directly. After verifying a domain in the portal, the domains list on the SSO card updates automatically.",[42,171,172,174],{},[46,173,107],{}," defaults to enabled when you first activate SSO. Review this setting before completing setup if you need a transition period.",[42,176,177],{},"JIT provisioning defaults to disabled. Enable it only if you want an open-door policy for your domain — all verified-domain users will be able to join automatically.",[42,179,180,181,184],{},"SSO configuration is restricted to users with the ",[46,182,183],{},"TeamLead"," role.",[42,186,187,188,191,192,196],{},"SSO audit logs are available for reviewing authentication events at ",[46,189,190],{},"Admin > Audit Logs"," (",[193,194,195],"code",{},"\u002Fapp\u002Fadmin\u002Faudit-logs","). You can filter by event type, date range, and user.",[29,198,200],{"id":199},"related","Related",[69,202,203,209,215],{},[42,204,205],{},[23,206,208],{"href":207},"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fsecurity-controls","Security Controls",[42,210,211],{},[23,212,214],{"href":213},"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Forganization-settings","Organization Settings",[42,216,217],{},[23,218,220],{"href":219},"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fmanaging-members","Member Management",{"title":222,"searchDepth":223,"depth":223,"links":224},"",2,[225,232,233],{"id":31,"depth":223,"text":32,"children":226},[227,229,230,231],{"id":36,"depth":228,"text":37},3,{"id":95,"depth":228,"text":96},{"id":106,"depth":228,"text":107},{"id":128,"depth":228,"text":129},{"id":148,"depth":223,"text":149},{"id":199,"depth":223,"text":200},"Connect your identity provider to HeadshotPro so team members authenticate through your company's existing SSO system.","md",{},true,"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fsso-setup",{"title":6,"description":234},"docs\u002Fteam-lead\u002Fmanaging-your-team\u002Fsso-setup","mT7AgIaGfW0Eg4ouW8PNBQXFkf3M6XmgTRoPy7iyMBI",[243,249,254,259,264,270,275,280,285,290,295,301,306,311,317,322,327,332,336,339,344,349,352,353,359,364,369,374,379,384,389,394,399,404],{"title":244,"description":245,"path":246,"dir":247,"slug":248},"Billing History","Where to find invoices and receipts, add your company details to them, and read the credit activity log.","\u002Fdocs\u002Fteam-lead\u002Fbilling\u002Fbilling-history","\u002Fdocs\u002Fteam-lead\u002Fbilling","billing-history",{"title":250,"description":251,"path":252,"dir":247,"slug":253},"Credits Overview","How team credits work: when a credit is used, what happens when someone leaves, edit credits, and how to track usage.","\u002Fdocs\u002Fteam-lead\u002Fbilling\u002Fcredits-overview","credits-overview",{"title":255,"description":256,"path":257,"dir":247,"slug":258},"Purchasing Credits","How to buy credits for your team: payment methods, the volume discount ladder, invoices for large orders, and automatic top-up.","\u002Fdocs\u002Fteam-lead\u002Fbilling\u002Fpurchasing-credits","purchasing-credits",{"title":260,"description":261,"path":262,"dir":247,"slug":263},"Refunds for Teams","The 30-day money-back guarantee for team purchases and how to request a refund.","\u002Fdocs\u002Fteam-lead\u002Fbilling\u002Frefunds","refunds",{"title":265,"description":266,"path":267,"dir":268,"slug":269},"Creating a Team Account","How to set up a HeadshotPro team: answer four questions, pick the look, pay, and invite your team.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Fcreating-a-team","\u002Fdocs\u002Fteam-lead\u002Fgetting-started","creating-a-team",{"title":271,"description":272,"path":273,"dir":268,"slug":274},"Inviting Members","Three ways to add people to your team: email invites, your shareable team link, or uploading photos for them.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Finviting-members","inviting-members",{"title":276,"description":277,"path":278,"dir":268,"slug":279},"The New AI Model for Teams","What changed with the latest AI model: 2–3 selfies instead of 15, 40 headshots per person, self-serve redos, and how to upgrade an older team.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Fnew-model","new-model",{"title":281,"description":282,"path":283,"dir":268,"slug":284},"HeadshotPro for Teams: Overview","How HeadshotPro Teams works for organizations: one consistent look, self-serve shoots for every member, and answers to the questions buyers ask first.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Foverview","overview",{"title":286,"description":287,"path":288,"dir":268,"slug":289},"Overview","Your team dashboard: credits, member progress, pending invites, the team link, and the left menu.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Fteam-dashboard","team-dashboard",{"title":291,"description":292,"path":293,"dir":268,"slug":294},"Team Link, QR Code and Poster","Your team's permanent join link at headshotpro.com\u002Ft\u002Fyour-company, its QR code, and the printable poster.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Fteam-link-qr-and-poster","team-link-qr-and-poster",{"title":296,"description":297,"path":298,"dir":299,"slug":300},"API Overview","The HeadshotPro API: what it automates, the three ways to connect your HR tools, and where the full documentation lives.","\u002Fdocs\u002Fteam-lead\u002Fintegrations\u002Fapi-overview","\u002Fdocs\u002Fteam-lead\u002Fintegrations","api-overview",{"title":302,"description":303,"path":304,"dir":299,"slug":305},"Gift Codes","Hand out headshots with redeemable codes instead of a team invite.","\u002Fdocs\u002Fteam-lead\u002Fintegrations\u002Fgift-codes","gift-codes",{"title":307,"description":308,"path":309,"dir":299,"slug":310},"Webhooks and Integrations","Connect HeadshotPro to Zapier or to your own systems with webhooks.","\u002Fdocs\u002Fteam-lead\u002Fintegrations\u002Fwebhooks-and-integrations","webhooks-and-integrations",{"title":312,"description":313,"path":314,"dir":315,"slug":316},"Creating and Managing Teams","How to create, edit, and delete sub-teams within your organization to group members by department","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fcreating-teams","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team","creating-teams",{"title":318,"description":319,"path":320,"dir":315,"slug":321},"Custom Fields","Collect extra information from your team members during their headshot onboarding.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fcustom-fields","custom-fields",{"title":323,"description":324,"path":325,"dir":315,"slug":326},"Customizing Emails","Control which emails your team receives, where admin alerts go, and rewrite the wording of member emails.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fcustomizing-emails","customizing-emails",{"title":328,"description":329,"path":330,"dir":315,"slug":331},"Deleting Your Organization","How the owner deletes a team organization, and how a team lead then deletes their own HeadshotPro account.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fdeleting-your-organization","deleting-your-organization",{"title":333,"description":334,"path":219,"dir":315,"slug":335},"Managing Members","Find any member, see where they are in their shoot, and take action from the Members page.","managing-members",{"title":214,"description":337,"path":213,"dir":315,"slug":338},"Manage your organization's name, logo, headshot preferences and email notifications.","organization-settings",{"title":340,"description":341,"path":342,"dir":315,"slug":343},"Removing Members","Remove a member from your organization, and understand what happens to their data and your credits.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fremoving-members","removing-members",{"title":345,"description":346,"path":347,"dir":315,"slug":348},"Roles and Permissions","Understand the owner, admin and member roles, and how to add or remove admins.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Froles-and-permissions","roles-and-permissions",{"title":208,"description":350,"path":207,"dir":315,"slug":351},"Configure MFA for admins, manage admins, transfer ownership, and set data retention for your organization.","security-controls",{"title":6,"description":234,"path":238,"dir":315,"slug":14},{"title":354,"description":355,"path":356,"dir":357,"slug":358},"Approving and Managing Headshots","How to review finished member headshots, mark them as handled, and download photos for the whole team","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fapproving-and-managing-headshots","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots","approving-and-managing-headshots",{"title":360,"description":361,"path":362,"dir":357,"slug":363},"Bulk Uploading Photos","Upload ZIP files for multiple team members at once to create headshot models without individual onboarding.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fbulk-uploading-photos","bulk-uploading-photos",{"title":365,"description":366,"path":367,"dir":357,"slug":368},"Creating Profile Picture Templates","How to create branded profile picture templates with shape, background, border, outline, and logo overlay settings.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fcreating-templates","creating-templates",{"title":370,"description":371,"path":372,"dir":357,"slug":373},"Enforcing Consistency","Use the approved list, outfit rules, backdrop settings, per-team overrides and pose selection to keep every team headshot on-brand.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fenforcing-consistency","enforcing-consistency",{"title":375,"description":376,"path":377,"dir":357,"slug":378},"Headshots Still Preparing","What to expect while a member's headshots generate, and what to do when a shoot looks stuck","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fheadshots-still-preparing","headshots-still-preparing",{"title":380,"description":381,"path":382,"dir":357,"slug":383},"Issuing Retries","How a team member gets a free retry, and how you start a new shoot for them when the retry is used up","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fissuing-retries","issuing-retries",{"title":385,"description":386,"path":387,"dir":357,"slug":388},"Managing Profile Picture Templates","How to edit, delete, set a default, and apply profile picture templates to organization members.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fmanaging-templates","managing-templates",{"title":390,"description":391,"path":392,"dir":357,"slug":393},"Pose Selection","Restrict which body poses HeadshotPro cycles through when generating headshots for your team.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fpose-selection","pose-selection",{"title":395,"description":396,"path":397,"dir":357,"slug":398},"Quality Tips","What to tell your team before they upload selfies, and why results sometimes differ from the person","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fquality-tips","quality-tips",{"title":400,"description":401,"path":402,"dir":357,"slug":403},"Style Presets","Choose the backdrops and outfits your team can use, add your own backdrops and outfits, and set a different look per team.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fstyle-presets","style-presets",{"title":405,"description":406,"path":407,"dir":357,"slug":408},"Viewing Team Headshots","Track every member's shoot from Overview and Members, open their photos, and download headshots in the sizes your organization needs","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fviewing-team-headshots","viewing-team-headshots",[410,414,418,422,426],{"slug":411,"name":412,"articles":413},"billing","Billing",[243,249,254,259],{"slug":415,"name":416,"articles":417},"getting-started","Getting Started",[264,270,275,280,285,290],{"slug":419,"name":420,"articles":421},"integrations","Integrations",[295,301,306],{"slug":423,"name":424,"articles":425},"managing-your-team","Managing Your Team",[311,317,322,327,332,336,339,344,349,352],{"slug":427,"name":428,"articles":429},"team-headshots","Team Headshots",[353,359,364,369,374,379,384,389,394,399,404],[],false,1793943946434]