> For the complete documentation index, see [llms.txt](https://changelog.gallabox.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://changelog.gallabox.com/may-2025/23-may-sso-authentication-and-widget-layout-enhancements.md).

# 23 May: SSO Authentication, and Widget Layout Enhancements

### ✨ New

#### **Enterprise Feature – SAML-Based SSO Authentication**<br>

We are rolling out **SAML-based Single Sign-On (SSO)** as a **paid enterprise add-on** to improve login security and simplify access for organizations.

Here’s what’s new:

* A **"Login with SSO"** button is now available on the Gallabox login screen.
* Users will be asked to enter their **work email** and click **Continue**.
  * If the domain has SSO enabled, they’ll be redirected to the organization’s **SSOReady login**.
  * If SSO isn’t enabled, an error will notify them:\
    🛑 *“Your organization has not enabled SSO.”*
  * If the user exists but isn’t invited:\
    🛑 *“You don't have access to Gallabox yet. Please contact your admin.”*
  * If the token is invalid or rejected:\
    🛑 *“Authentication failed. Please try again or contact your admin.”*

Additional Notes:

* For SSO-enabled orgs, **invite emails will have a dedicated “Login with SSO” button**.
* **2FA/MFA authentication will be skipped** for users logged in via SSO.

<figure><img src="/files/haU3ckZZrNuHbGJGYV43" alt=""><figcaption></figcaption></figure>