Do I need to create user accounts in Procore when using SSO?

Single sign-on (SSO) allows users to log in to Procore using your organization's centralized identity provider. Because Procore does not support automatic user provisioning through SSO, you must manually set up each user profile before they can access your company account. Adding these accounts ensures that permissions and login credentials align properly with your identity provider.

Yes. You must create a user account in the Directory tool for every person who needs access to your company in Procore.

Account requirements depend on how you want your users to authenticate:

• Users authenticating via your Identity Provider:

  • Email: The Procore login email must match their primary IdP email address exactly.

  • Password: Leave the Procore password blank unless your company has Allow Password Login enabled in its SSO configuration.

  • Login Flow (IdP-Initiated): Users authenticate and launch Procore directly from your IdP's dashboard or app portal.

• Users authenticating directly through Procore:

  • Email: The Procore login email is the user's business email address.

  • Password: Users set their own password directly in Procore via their welcome invitation email.

  • Login Flow (SP-Initiated): Users start at the Service Provider by navigating to app.procore.com or login.procore.com to enter their credentials and log in directly.