Skip to main content

​
What is SSO Lite?

SSO Lite enables a secure multi-member collaboration model within a single Together account. With SSO Lite you can:
  • Securely connect Together accounts to your existing Identity Provider (IdP), including Google Workspace, Okta, Microsoft Entra, and JumpCloud.
  • Onboard and offboard members through your IdP.
  • Share access to organizational resources like fine-tuned models, inference analytics, and billing.
Fine-grained role-based access and spend controls are on our roadmap and will be added directly to the SSO Lite experience, but are not available from the get go.

​
Benefits of SSO Lite

Access the newest collaboration features: SSO Lite unlocks multi-member org features, including shared resources and billing. Upcoming capabilities like spend controls, granular permissions, and advanced analytics will only be available in SSO Lite. Stronger security and compliance: Individualized authentication via your IdP eliminates shared passwords, reduces risk, and makes onboarding/offboarding seamless.

​
FAQs

​
What does the setup process involve?

To get started, regardless of the pricing plan you’re on, reach out to Customer Support or your Account Executive to let them know you’d like to enable SSO Lite. Please gather the following information in advance:
  • Legal company name
  • Email domain(s) used by your team (e.g., @company.com)
  • Identity Provider (IdP) (e.g., Google Workspace, Okta, etc.)
  • Account to use as the initial owner (ideally the account with the most Together usage)

​
How long does setup take?

Most customers are fully set up within 24–48 hours. More complex configurations may take a bit longer.

​
Why are we moving away from shared username/password enterprise sign on accounts?

Our legacy “enterprise sign-on” required teams to share a single username/password account. This approach has several downsides:
  • Security risk – shared credentials increase the chance of unauthorized access.
  • No scalability – no way to onboard/offboard at the individual level.
  • No collaboration – all activity is tied to one account, making it impossible to eventually share work or manage usage by members.
  • No future features – we are retiring enterprise sign-on within the next 1–2 months and will not roll out any new improvements to it.
Going forward, we will not be recommending enterprise sign-on as the default path for team collaboration.

​
I have a shared username/password enterprise sign on account, why should I migrate?

Enterprise sign-on will be deprecated in the coming months. Migrating now can prevent disruptive and time-consuming manual transitions later when your team has accumulated models, analytics, and billing history that are difficult to re-map.

​
Does Together use my IdP’s default session timeout?

No, we have our own session timeout.
⌘I