Sorry, the InVision Help Center does not support Internet Explorer. Please download Microsoft Edge or another modern browser.


SSO Settings in InVision V7

This article provides answers for InVision V7 only. If you're using InVision V6, read this article instead. Not sure which version you're using? Find out now.

After you have configured settings in your identity provider (IdP), you will need to configure SSO settings in InVision V7.

SSO in InVision V7 is only available for Enterprise plans. To set up SSO, you must be an owner or admin on the Enterprise account.

Accessing SSO settings

To access your SSO settings:

  1. Sign in to your InVision Enterprise here: your-team-name.invisionapp.com
  2. In the lower-left corner, click the [Your Team Name] dropdown, and then click People & Team settings.
    The Team page will open with the People tab active.
  3. Click Settings tab, and then click Single sign-on.
  4. Toggle on Require SSO for every member of [your enterprise team].
  5. Complete the form, using the appropriate information from your IdP's metadata file.
  6. Click Update.
    invision-v7-enterprise-turn-on-sso.gif

Fine-tuning your sign-in experience

Within the SSO settings, there are two options that let you customize the sign-in experience:

  • Allow users to sign in without SAML
  • Allow Just-in-Time provisioning

Allow users to sign in without SAML

If this setting is toggled on (invision-cloud-v7-team-setting-toggle-on.png), members of your team can choose to sign in via your IdP or by using their InVision email and password.

Enabling this setting can also save time and hassle, as it allows users outside of your company—people who don’t have SSO accounts with your company—to access your InVision team.

Allow Just-in-Time provisioning

If Just-in-Time provisioning is toggled on (invision-cloud-v7-team-setting-toggle-on.png), here's what to expect:

  • Anyone who you have previously authorized—via your IdP app—can automatically join your InVision Enterprise team when signing in via SSO for the first time.
  • You'll choose which default role will be assigned to people who join the team via Just-in-Time provisioning:
    • Guest: People with the guest role can create documents, but they can only access spaces and/or documents that other people have created if they are explicitly invited.
    • Member: People with the team member role can preview and join all open documents and spaces.

If Just-in-Time provisioning is toggled off (invision-cloud-v7-team-setting-toggle-off.png), you'll add a custom message to let prospective new members know how to request access and join your team:

invision-cloud-v7-sso-settings-request-access-message.gif

Configuring your IdP for use with InVision

For information on setting up SSO with a specific IdP, check out one of these articles:


Learn something new

Craft for design

With Craft designers can speed up their design workflow in Sketch. You can use Craft tools to quickly populate your designs, prototype, and sync design files to InVision.

Learn Craft

Intro to Design System Manager

Learn about InVision DSM, the design system platform for collaborative teams. Find the plan that's right for you and your team and set up your DSM organization.

Learn DSM

Getting started with InVision Enterprise V7

InVision Enterprise provides a connected workflow that brings together the tools, people and processes needed to build great digital experiences at scale.

Learn InVision V7

Organization setup and team management

Let’s get your organization set up right. You can modify account settings, and integrate with the tools your team already uses. Then invite your team and set permissions.

Learn setup & management

Image of Craft Logo