Set up single sign-on for your organization

Single sign-on (SSO) lets your team sign in to QuickBooks Online Accountant, and Intuit Accountant Suite, and using your organization's existing identity provider — no separate Intuit password to manage, and your organization's own security policies apply automatically.

SSO is free for Intuit Accountant Suite, and QuickBooks Online Accountant customers. Once it's set up, your users sign in with their corporate credentials and your identity provider handles authentication, multi-factor authentication (MFA), and access policies.

Which identity providers are supported

Intuit currently supports three identity providers for SSO:

• Microsoft Entra ID (formerly Azure AD)
• Google Workspace
• Okta

Note: Support for additional identity providers is planned. If you use a provider that isn't listed, contact us at sso-onboardingsupport@intuit.com.

User lifecycle management

Beyond SSO, Intuit supports automatic user lifecycle management through SCIM — provisioning and deprovisioning users directly from your identity provider, with no manual steps and no need to create or delete Intuit accounts.

This strengthens security: the moment a user is deactivated in your identity provider, their Intuit account access is terminated immediately, leaving no lingering access to your data.

Who can set up SSO

Setup is started by the primary admin or company admin of your organization. The admin begins onboarding, then either completes the identity provider configuration in the same session or invites an IT admin to finish it.

Set up SSO in Intuit Account Manager

1. Sign in to Intuit Account Manager at accounts.intuit.com.
2. Select the Single sign-on tab. Only the primary admin and company admin see this tile.
3. Follow the guided steps and select the companies you want to onboard for SSO.
4. Choose how to complete the identity provider configuration:
   • Continue yourself if you're also the IT admin or comfortable with the technical setup — configure your identity provider right away in the same session.
   • Invite your IT admin — Intuit sends an email invitation to your IT admin to finish the technical configuration.

Inviting your IT admin

If your IT admin is completing the configuration, they open the invitation link and sign in with an Intuit ID (or create one). They're taken directly to the SSO configuration for your organization — no company selection needed — and follow the on-screen steps to connect your identity provider.

⚠️ Security advisory Enabling single sign-on extends administrative control of your Intuit products to your identity provider administrators. Anyone with admin rights over your identity provider can effectively control access to your Intuit products.

Key recommendation: Enforce multi-factor authentication (MFA) for all users in your identity provider. Without it, one compromised password can expose your entire Intuit account.

Your responsibility: Intuit doesn't manage your identity provider. Your organization is responsible for ensuring your identity provider configuration and all SSO/SCIM access meet your internal security standards and applicable regulatory requirements. Intuit isn't liable for unauthorized access resulting from compromised credentials or identity provider misconfiguration.

Frequently asked questions

How do users sign in after SSO is set up? Users continue to sign in with their email. They're then redirected to your configured identity provider, where they sign in with their own corporate credentials.

What happens to our existing accounts? Existing accounts are converted as-is. There's no change to access — users keep the same permissions.

Do our own security policies and MFA still apply? Yes. Once SSO is set up, sign-in is managed by your organization and your identity provider's policies — including MFA and conditional access — apply automatically. On the Intuit side, the sign-in and security settings show "Managed by your organization."

What if we remove someone from our identity provider? Their access to Intuit products is revoked automatically. Managing users in your identity provider keeps Intuit access in sync, with no separate offboarding step needed.

Is there a cost for SSO? No. SSO is free for Intuit Accountant Suite, Intuit Enterprise Suite, and QuickBooks Online Accountant customers.

How long does onboarding take? The flow is fully self-guided and typically takes under an hour to complete.

I don't see the Single sign-on tile in Intuit Account Manager. Why? The Single sign-on tile is only visible to the primary admin and company admin. If you don't see it, make sure you're signed in with the admin account.

Can I add an identity provider that isn't listed? Today we support Microsoft Entra ID, Google Workspace, and Okta. Support for additional providers is planned — contact us at sso-onboardingsupport@intuit.com if you use another identity provider.

Need more help?

Start your setup at accounts.intuit.com. If you have questions during setup, contact us at sso-onboardingsupport@intuit.com.