Workspace admins can require single sign-on through any SAML 2.0 identity provider.

1. In Settings → Security, choose Add SAML connection and copy the ACS URL.
2. Create an app in your identity provider using that URL and the entity ID.
3. Upload the provider's metadata XML back in Settings.
4. Test with one account before enforcing SSO for everyone.