Does MentorStack support SAML single sign-on?
Yes. MentorStack supports SAML single sign-on on the Growth plan and above. The connection runs through WorkOS, so your identity team does not fill in SAML or OIDC fields by hand. Members then sign in through your identity provider, such as Okta, Azure AD or Google Workspace, instead of a MentorStack password.
Which plan includes SSO, and what does it cost?
SSO starts on the Growth plan, listed at $20 per seat per month, or $17 on annual billing. Free and Starter show an upgrade prompt where the setup flow would be. Two-factor authentication is separate. Any admin on any plan can require it for every member. See the pricing page for current terms.
How does an IT team set up SSO?
An admin opens Settings, then the SSO tab, and starts the setup. MentorStack generates a link to the WorkOS Admin Portal, where your identity team completes the connection. You then list your verified email domains and validate the connection. Enforcement can only be turned on after validation succeeds.
- Start the setup and send the portal link to your identity team.
- Add every email domain your members use under Verified Domains.
- Validate the connection.
- Turn on enforcement when you are ready.
What happens when you enforce SSO?
Enforcement requires every member to sign in through your identity provider, and password login is disabled for everyone, including the admin who turned it on. Before enforcement, members on a verified domain can use either method. Confirm you can sign in through your identity provider first, because the app offers no undo.
Does MentorStack support SCIM provisioning?
No. MentorStack does not offer SCIM provisioning, and SSO covers sign-in only. Members join through invitations, bulk invite by CSV, or HRIS sync on the Growth plan. If your policy requires automated deprovisioning through SCIM, treat that as a gap and confirm it before you choose a tool.
Is MentorStack the right choice if you need SSO?
It fits a lean L&D or Talent team on the Growth plan whose identity team can complete a WorkOS connection. If you need SCIM provisioning, compare other tools first. Read the security page and the integrations page for current details before you sign.
If you are comparing vendors, the mid-size company guide shows what else to check.
Common questions
- Does MentorStack support SSO and SAML?
- MentorStack supports single sign-on on the Growth plan and above. Your identity team connects your identity provider, such as Okta, Azure AD or Google Workspace, through a WorkOS-managed setup. Sign-in uses SAML or OAuth, so people reach MentorStack through the account they already use for work.
- What do admins do to turn on SSO?
- After the identity provider is connected, admins verify their email domains, validate the connection, and choose whether to enforce SSO. Enforcement is optional, so a team can test the connection with a few people first and require single sign-on for everyone only when it is ready.
- Which plans include SSO?
- SSO and SAML are included on Growth, which costs $20 per active participant per month or $17 billed annually, and on Enterprise. The Free Pilot and Starter plans do not include it. Growth also adds HRIS integration, diversity metrics, scheduled reports and custom report branding.
- Does MentorStack offer SCIM provisioning?
- MentorStack does not offer SCIM provisioning. Sign-in uses SAML or OAuth only. Admins add people through invitations, bulk invite or HRIS sync on Growth and above. Teams that require automated SCIM user provisioning should account for this when comparing vendors.