Integrations: single sign-on
SAML single sign-on for your mentoring programs
By Ciprian Rarau, CTO. Checked against the Mentorly platform in November 2026.
Yes. As of November 2026, Mentorly offers SAML SSO with Okta, Microsoft Entra and Duo, set up per identity provider, so mentors, mentees and program managers sign in with the work account they already use and do not need a separate Mentorly password. One connection covers every program your organization runs on Mentorly, and your identity provider’s own rules, such as multi-factor authentication, apply at every sign-in. Beyond sign-in, Startup Canada participants gave the Mentorly platform a 94% satisfaction rating.
How a sign-in works
The person starts where they are
A participant opens your program’s sign-in link, or picks Mentorly from your identity provider’s list of apps.
Your identity provider checks who they are
Mentorly sends them to Okta, Microsoft Entra or Duo, where your own policies apply: multi-factor authentication, device rules, conditional access.
Mentorly reads a signed answer
Your identity provider returns a signed SAML response. Mentorly checks the signature and reads the email, first name and last name.
They land in their program
From a program’s link, Mentorly signs them in to the program the link names; from your list of apps, to a program they already belong to, or to your program when the connection covers only that one. Someone signing in for the first time goes straight to that program’s sign-up questions, which feed matching.
What Mentorly checks at every sign-in
A signed response proves who someone is. These rules decide what they can reach.
- Required details
- If the email, first name or last name is missing from the response, Mentorly refuses the sign-in and asks the person to contact their administrator.
- Names stay current
- When a person’s name changes in your identity provider, Mentorly updates it at their next sign-in.
- Removed means removed
- Someone a program manager removed from a program cannot sign back in to it through single sign-on until they are invited again.
- Your programs only
- Your connection only ever opens the programs it covers, so an account a person holds in another organization’s program is never reached through your login.
- Invitations still count
- People you imported but have not invited yet cannot sign in until their program manager sends the invitation.
What your IT team sends us, and what we send back
Your IT team creates the application
In Okta, Microsoft Entra or Duo, your team adds Mentorly as a SAML application and sends us its metadata URL.
We set up the connection
We add your identity provider on our side, list the programs the connection opens, and send back the sign-in link and the callback address your application needs.
You test it with one person
Someone from your team signs in through the link before the program launches, so the first participant is never the test.
What single sign-on does not do
Single sign-on adds people, and never removes them. Someone who signs in for the first time through a program’s link joins that program; people also join by invitation or by an import from your HRIS by CSV or XLS. When someone leaves and your identity provider stops signing them in, they can no longer reach Mentorly through single sign-on, but their account stays in the program until their program manager removes it.
Where single sign-on sits in our security
The Mentorly platform and its database are hosted on Microsoft Azure, in the Canada Central region, and data is encrypted in transit and at rest. Our Trust Center lists the controls that are live today and tracks our SOC 2 Type 2 audit in progress.
See the Mentorly Trust CenterQuestions IT teams ask about single sign-on
Does Mentorly support SAML single sign-on?
Yes. Mentorly offers SAML SSO with Okta, Microsoft Entra and Duo, set up per identity provider. Mentors, mentees and program managers all sign in the same way.
Can people sign in from our identity provider’s app list?
Yes. The Mentorly tile in your identity provider takes people to a program they belong to. When your connection covers several programs, someone joining for the first time uses your program’s sign-in link, which tells Mentorly which program to open.
Does single sign-on add or remove people automatically?
It adds, and never removes. A first sign-in through a program’s link adds the person to that program. Someone who leaves your organization can no longer sign in, and a program manager removes them from the program.
Can one connection cover several mentoring programs?
Yes. We list every program a connection opens, so a person who mentors in one program and is mentored in another uses the same work login for both.
Where does Mentorly stand on SOC 2?
The SOC 2 Type 2 audit is in progress. The controls that are live today are listed on the Mentorly Trust Center.