SSO & Identity

Set up single sign-on with OIDC

OIDC is the newer of the two SSO options. It works, but SAML has had far more real-world use with DMARCS, so use OIDC only if your provider doesn't do SAML or your policy requires it.

Where to find it

Organization → Integrations → SSO

Who can use it

Organization Admin

1. Register DMARCS as an application in your identity provider

   Note the Tenant ID, Client ID and Client Secret it gives you.

2. Choose OIDC in DMARCS

   On the SSO page, set Provider Type to OIDC. The fields below change to match.

3. Enter the three values and save

   A secret that's already saved shows as masked. It is only replaced if you type a new one, so re-saving the form without touching it is safe.

4. Test in a private window

   Token errors ("audience mismatch", "issuer not recognized" and friends) almost always mean one of the three values is wrong. See Troubleshooting.