---
title: "Manage an SSO connection | Lansweeper Platform"
slug: "manage-an-sso-connection"
description: "Manage an SSO connection in Lansweeper. Add or remove domains, edit connection settings, invite connection managers, or delete the connection."
updated: 2026-08-13T10:07:44Z
published: 2026-08-13T10:07:44Z
canonical: "docs.lansweeper.com/manage-an-sso-connection"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lansweeper.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage an SSO connection

After you [set up an SSO connection](/docs/set-up-an-sso-connection), you manage it from the same **Single Sign-On** view in your account settings. From there, you can add or remove domains, edit the connection, invite connection managers, or delete the connection.

## Prerequisites

- You're a manager (Admin or Owner) of the SSO connection.

<!-- VERIFY: confirm whether any of the actions below are Owner-only, or if Admins can perform all of them except managing other managers. -->

## View your SSO connections

1. Go to **Account settings > Single Sign-On**.
2. Select a connection to open it.

<!-- SCREENSHOT: The Single Sign-On view showing an SSO connection with the Invite managers, Add domain, Edit, and Delete buttons -->

The connection view lists **Invite managers**, **Add domain**, **Edit**, and **Delete**.

## Manage domains

### Add a domain

1. Select **Add domain**.
2. Enter the domain, then select **Add**. Lansweeper adds the domain and shows a code to verify ownership.
3. Add the code as a TXT record with your DNS provider.
4. Return to the connection view and select **Verify domain**.

A domain shows as **Verified** or **Not verified** in the connection view.

### Enable or disable a domain

Each domain has an **Enable domain** toggle.

Turning it on enables SSO for that domain. Users with an email address on the domain can log in with SSO, and password login remains available unless a site requires SSO.

Turning it off disables SSO for the domain. Users with an email address on the domain lose SSO access and must log in with their Lansweeper email and password.

<!-- SCREENSHOT: The domain row in the Single Sign-On view, showing the Enable domain toggle and verification status -->

### Remove a domain

You can only remove a domain after you disable it.

1. Disable the domain, if it's still enabled.
2. Select **Remove domain**.
3. In the dialog, select **Remove**.

## Edit a connection

Select **Edit** to change the connection's name, IdP details, IdP-initiated SSO setting, NameID format, or email claim. See [Set up an SSO connection](/docs/set-up-an-sso-connection) for details on each field.

## Delete a connection

Deleting a connection permanently removes it and all its domains.

<!-- VERIFY: confirm whether Lansweeper still requires you to disable or remove all domains before you can delete a connection. -->

1. Select **Delete**.
2. In the dialog, select **Delete**.

:::(Error) (This can't be undone)
Deleting an SSO connection permanently removes the connection and its domains. Users on those domains lose SSO access and must log in with a Lansweeper password.
:::

## Manage connection managers

An SSO connection needs at least one owner. You can invite up to 10 managers in total, including yourself.

| Role | Can do |
|---|---|
| Admin | Edit the SSO connection's settings. |
| Owner | Edit the SSO connection's settings, and manage other managers. |

### Invite a manager

1. Select **Invite managers**.
2. Enter the email addresses of the people you want to invite.
3. Select a role: **Admin** or **Owner**.
4. Select **Send invite**.

### Change a manager's role

1. Select the manager.
2. Select **Change role**.
3. In the dialog, select the new role, then select **Change**.

### Remove a manager

1. Select the manager.
2. Select **Remove as manager**.

### Leave a connection

You can select **Leave connection** next to your own name to remove yourself as a manager.

:::(Info) (Sole owners can't leave)
If you're the only owner of a connection, **Leave connection** is disabled. Invite another owner first, and wait for them to accept, before you leave.
:::

## Require SSO for a site

You can require SSO for a specific site instead of leaving it optional. Go to **Site settings > General > Authentication** and enable **Require SSO for this site**.

## Next steps

- [Set up an SSO connection](/docs/set-up-an-sso-connection)