Can users log in with Procore credentials if SSO is enabled?
Background
Single Sign-On (SSO) allows users to log into multiple software applications using one set of credentials. Procore supports both IdP-initiated SSO and SP-initiated SSO. Understanding which SSO configuration your company uses determines whether you can sign in directly through the Procore login page or if you must log in through your IdP portal.
Answer
Yes. Users can log in directly from the Procore login page, though the exact login experience depends on whether your organization uses IdP-initiated SSO orSP-initiated SSO:
Feature | IdP-Initiated SSO | SP-Initiated SSO |
|---|---|---|
Primary Login Point | Your Identity Provider (IdP) portal (e.g., Okta, Microsoft Entra ID, OneLogin). | The standard Procore login page ( |
How It Works | Users sign into their IdP portal and click the Procore app tile, which automatically authenticates and opens Procore. | Users enter their email on Procore's login page, Procore redirects to the IdP for verification, and returns the user to Procore. |
Direct Procore Login | Supported via username and password (or secondary redirection, if configured). | Fully supported natively via SSO email routing. |
If your organization enables SP-initiated SSO (Company Admin > Company Settings > Single Sign On Configuration), users cannot reset passwords directly through the Procore login screen.
Because authentication is handled by your Identity Provider (IdP), all password updates and recoveries must be processed by your internal IT department. Users unsure of their login method should consult their company's IT team or Procore Administrator.