Admins can require everyone in a workspace to sign in with their work account from Google, Microsoft or either. Anyone using a password, a sign-in code or a passkey is signed out of that workspace at once and asked to continue with the required provider. Freesbe won't let you require a provider you aren't signed in with.
For IT teams on Google Workspace or Microsoft 365 who want one place to switch people off.
Open Sign-in under Security & compliance and, under Members must sign in with, choose Google, Microsoft, or Google or Microsoft. Choose Any sign-in method to turn it off again. Before you can require a provider, you have to be signed in with it yourself: Freesbe won't let you require Google while you're signed in with a password. If your phone approves sign-ins, the change asks for one more tap first, unless you verified in the last 15 minutes.
Anyone using the workspace with a password, a sign-in code or a passkey is signed out of that workspace right away and asked to continue with the required provider. Their Freesbe account stays the same: signing in with the provider links it to their account when the addresses match, and they can connect the provider in Preferences first if they don't. Other workspaces they belong to aren't affected, and emailed sign-in codes no longer open this one.
Start free with up to 10 people and try it today, or book a 20-minute demo with the people who make Freesbe.
Requiring single sign-on decides how people sign in, not who can join: people still need an invite, or an address at one of the workspace's verified email domains. Together they cover a whole company: everyone at your domain can join on their own, and has to sign in with your Google or Microsoft work accounts. For Microsoft, your Freesbe server can be set up to accept only work and school accounts, or only your organization's directory.
Scripts that signed in with a password lose access to the workspace, as they should. Apps don't: an app's bot token posts as the app, does only what its scopes allow, and isn't held to single sign-on or multi-factor authentication, so your integrations, Zapier and n8n keep running after you turn the rule on.
Single sign-on is included in Corporate and Enterprise. Signing in with Google or Microsoft works on every plan; requiring it for everyone needs Corporate.
The help guide shows every screen and setting. Single sign-on
No card, no time limit. Invite your team and see what sticks.