# 23 May: SSO Authentication, and Widget Layout Enhancements

### ✨ New

#### **Enterprise Feature – SAML-Based SSO Authentication**<br>

We are rolling out **SAML-based Single Sign-On (SSO)** as a **paid enterprise add-on** to improve login security and simplify access for organizations.

Here’s what’s new:

* A **"Login with SSO"** button is now available on the Gallabox login screen.
* Users will be asked to enter their **work email** and click **Continue**.
  * If the domain has SSO enabled, they’ll be redirected to the organization’s **SSOReady login**.
  * If SSO isn’t enabled, an error will notify them:\
    🛑 *“Your organization has not enabled SSO.”*
  * If the user exists but isn’t invited:\
    🛑 *“You don't have access to Gallabox yet. Please contact your admin.”*
  * If the token is invalid or rejected:\
    🛑 *“Authentication failed. Please try again or contact your admin.”*

Additional Notes:

* For SSO-enabled orgs, **invite emails will have a dedicated “Login with SSO” button**.
* **2FA/MFA authentication will be skipped** for users logged in via SSO.

<figure><img src="/files/haU3ckZZrNuHbGJGYV43" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://changelog.gallabox.com/may-2025/23-may-sso-authentication-and-widget-layout-enhancements.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.