Who this guide is for: Administrators
Platform: Sense Automate/ Sense HR (for SSO on all Sense Workplace products)
Available on: Elite and Enterprise plans
Before you begin
Make sure you have:
☑️ Logged in to Sense Workplace with administrator access
☑️ Confirmed whether your organisation uses Microsoft or Google as its identity provider
☑️ Confirmed that employee login email addresses are managed by your organisation’s Microsoft or Google domain
🖊️ Note:
Personal email accounts may not be supported. The employee’s Sense login email should match the work email account they use with your organisation’s Microsoft or Google identity provider.
Overview
Single Sign-On (SSO) allows employees to sign in to Sense using their existing work Microsoft or Google account.
To use SSO invitations, an administrator must first install and deploy the relevant SSO Library workflow from Sense Automate.
Sense currently supports:
SSO provider | Workflow to install |
Microsoft | Microsoft SSO |
Google SSO |
Once the workflow is deployed, administrators can invite employees to connect their Sense login to their Microsoft or Google work account.
🖊️ Note:
Installing a Library workflow does not activate it immediately. After installation, the workflow appears in Automate > Workflows as Undeployed until you choose to deploy it.
Navigation paths
To install the workflow:
To deploy and manage the workflow:
Choose the correct SSO workflow
Before installing a workflow, confirm which identity provider your organisation uses for employee sign-in.
Choose:
Microsoft SSO if employees use Microsoft work accounts, such as Microsoft 365 or Entra ID accounts.
Google SSO if employees use Google Workspace work accounts.
⚠️ Caution:
Only install and deploy the workflow that matches your organisation’s supported SSO provider. If your organisation uses both Microsoft and Google accounts, confirm internally which provider should be used for Sense access before inviting employees.
Install the SSO workflow from the Workflow Hub
Go to Sense Automate
In the left-hand navigation, select Workflow Hub.
Use the search box to find either:
• Microsoft SSO
• Google SSOSelect the workflow tile to open the workflow details page.
Review the workflow description.
Select Install.
✅ The workflow is added to your organisation’s installed workflows.
🖊️ Note:
At this point, the workflow is installed but not active. It will appear in Automate > Workflows with the status Undeployed. Installed workflows do not affect your live system until they are deployed.
Deploy the SSO workflow
Go to Sense Automate > Workflows.
Locate the installed SSO workflow.
Open the More actions (…) menu on the workflow row.
Select Deploy.
✅ The workflow status changes to Deployed.
Once deployed, the SSO invitation workflow is active and can be used to invite employees to connect their Sense login to the selected SSO provider. Deploying activates the workflow so its automation logic begins running across the relevant Sense products. 
Invite an employee to use SSO
After the relevant SSO workflow is deployed, you can send SSO login invitations from Sense HR > People.
The invite option that appears depends on the SSO workflow deployed for your organisation:
Send Microsoft Login Invite for employees signing in with Microsoft
Send Google Login Invite for employees signing in with Google
The invitation sends the employee an email with a link to start the SSO connection process.
🖊️ Note:
Employees must use the work email account associated with your organisation’s Microsoft or Google domain. Personal email accounts may not be supported.
Recommended first step for Microsoft SSO
If your organisation uses Microsoft SSO, we recommend sending the first invite to one test user, such as yourself, another administrator, or a member of your IT team.
Depending on your organisation’s Microsoft Entra security policies, an IT administrator may need to approve the Sense SSO app before employees can complete the connection.
Testing with one user first allows your IT team to review and approve any Microsoft permissions or admin consent request before you send invitations to employees in bulk.
Once IT has confirmed the Microsoft SSO connection works as expected, you can invite the remaining employees in bulk.
🖊️ Note:
If an employee sees a permissions, consent, or admin approval message during Microsoft sign-in, ask your Microsoft Entra administrator or internal IT team to review and approve the request.
Invite a single employee
Use this option when testing the SSO process or inviting one employee at a time.
Go to Sense HR > People.
Select the employee’s profile.
Open the More actions (…) menu in the upper right.
Select Send Microsoft Login Invite or Send Google Login Invite, depending on your organisation’s SSO provider.
Invite employees in bulk
Use this option when you are ready to send SSO invitations to multiple employees.
Go to Sense HR > People.
Tick the checkbox beside each employee you want to invite.
In the action bar, select Send Microsoft Login Invite or Send Google Login Invite, depending on your organisation’s SSO provider.
What the employee receives
The employee receives an SSO invitation email from Sense.
When they click the link, they are guided through the login process for the relevant provider. If they are not already signed in to Microsoft or Google in their browser, they will be prompted to sign in.
After completing the flow, their Sense account is connected to their SSO login.
Microsoft Entra or Google approval requirements
Depending on your organisation’s security policies, employees may not be able to approve the SSO connection themselves.
For Microsoft SSO, some organisations require an IT or Microsoft Entra administrator to approve the Sense SSO app before employees can complete sign-in.
For Google SSO, some organisations may also restrict third-party app access or require Google Workspace administrator approval.
🖊️ Note:
If an employee sees a permissions, consent, or admin approval message and cannot continue, they should contact their internal IT team. Sense cannot override your organisation’s Microsoft Entra or Google Workspace security policies.
Troubleshooting
The workflow is installed but employees cannot be invited
Check that the workflow has been deployed
Go to Sense Automate > Workflows and confirm that the workflow status is Deployed.
If the workflow is still showing as Undeployed.
The workflow has been installed but not activated.Open the More actions (…) menu and select Deploy.
The employee cannot complete the Microsoft or Google sign-in process
Ask the employee to confirm that:
they are using their work Microsoft or Google account
their Sense login email matches their work account
they are not attempting to use a personal email account
they have followed the link from the SSO invitation email
If they see an approval or permissions message, their internal IT team may need to approve access.
The workflow fails to deploy
Try the following:
Refresh the page and try again.
Check if the workflow requires an update.
Check your internet connection.
Contact Sense Support with the workflow name and Workflow ID.
Workflow failures can be investigated by Sense Support using workflow logs and IDs.
Summary
To enable SSO invitations:
Go to Sense Automate > Workflow Hub.
Install either Microsoft SSO or Google SSO.
Go to Sense Automate > Workflows.
Deploy the installed workflow.
Invite employees using the relevant SSO invite custom action.
Employees complete the connection using their work Microsoft or Google account.
FAQs
Click here to see answers to frequently asked questions
Click here to see answers to frequently asked questions
Q: Can Sense support both Microsoft and Google SSO?
A: Yes. Sense supports both Microsoft and Google SSO workflows. Using Sense Automate, administrators should install and deploy the workflow that matches the identity provider used by their organisation.
Q: Do employees need a separate Sense password after using SSO?
A: No, employees do not need a separate Sense password. Once SSO is connected, employees use their work Microsoft or Google account to sign in to Sense.
Q: Can employees use a personal Microsoft or Google account?
A: Personal email accounts may not be supported. Employees should use the work email account managed by your organisation’s Microsoft or Google domain.
Q: Why does an employee see an admin approval message?
A: Your organisation’s Microsoft Entra or Google Workspace security settings may require administrator approval before the Sense SSO app can be used.
The employee should contact your internal IT team.
Q: Can I uninstall the SSO workflow after employees have been invited?
A: Do not uninstall or undeploy the SSO workflow unless you are intentionally stopping SSO access or Sense Support has advised you to do so.
The SSO workflow supports the SSO login process for your organisation. If it is undeployed or uninstalled, employees may be unable to connect or continue signing in with Microsoft or Google SSO.
If you need to make changes, check with Sense Support before undeploying or uninstalling the workflow.