Team SSO

Team administrators can attach their own SAML identity provider configurations to a team — without waiting for a platform-wide SSO change by Automation Anywhere. Open My Account → Single Sign-On.

Connect your own identity provider for this team. If the team has a subdomain, the default configuration can be offered automatically to anyone signing in on that subdomain. If there is no subdomain, members use the Login URL for that configuration instead.

​

Team SSO vs platform SSO

Team SSO configurations live separately from the app-wide SSO path so they are not mixed up with platform providers.

​

Add a configuration

1. Open My Account → Single Sign-On.
2. Select New SSO configuration.
3. Upload IdP metadata (or complete the fields your IdP requires).
4. Copy the generated values into your IdP:
   • ACS URL (reply URL) — also used as the SAML audience for this configuration
   • Login URL — where members start SSO for this team when not using subdomain auto-offer
5. Enable the configuration. Optionally mark it as the one to use on this team’s subdomain.

Each configuration gets its own ACS URL/audience so two teams pointing at the same IdP cannot replay one another’s assertions. You can keep multiple configurations per team (up to 20).

​

Subdomain behavior

Subdomains for child teams are managed from Sub-teams.

​

Who can manage Team SSO

​

Related

• Sub-teams
• Account Settings (SSO-only login and domain auto-add)
• Platform SSO