# 23 May: SSO Authentication, and Widget Layout Enhancements

### ✨ New

#### **Enterprise Feature – SAML-Based SSO Authentication**<br>

We are rolling out **SAML-based Single Sign-On (SSO)** as a **paid enterprise add-on** to improve login security and simplify access for organizations.

Here’s what’s new:

* A **"Login with SSO"** button is now available on the Gallabox login screen.
* Users will be asked to enter their **work email** and click **Continue**.
  * If the domain has SSO enabled, they’ll be redirected to the organization’s **SSOReady login**.
  * If SSO isn’t enabled, an error will notify them:\
    🛑 *“Your organization has not enabled SSO.”*
  * If the user exists but isn’t invited:\
    🛑 *“You don't have access to Gallabox yet. Please contact your admin.”*
  * If the token is invalid or rejected:\
    🛑 *“Authentication failed. Please try again or contact your admin.”*

Additional Notes:

* For SSO-enabled orgs, **invite emails will have a dedicated “Login with SSO” button**.
* **2FA/MFA authentication will be skipped** for users logged in via SSO.

<figure><img src="https://4041939653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FKvXbyN7GvoMO6ReyVRS6%2Fuploads%2FAyECfXYJnpsHpRahTIz7%2FLogin%20with%20SSO.png?alt=media&#x26;token=7f848550-87c6-4b9b-961d-7d9b267e3fa8" alt=""><figcaption></figcaption></figure>