# SSO Sign-in

> Identifier-first sign-in for teams. Type a work email and the domain is checked with a quiet spinner: companies on SSO get a card naming the organisation and its identity provider and a Continue with Okta button, everyone else gets a password field that eases in. Results are cached per domain, and a workspace-URL route sits in the footer.

- Slug: `sso-sign-in`
- Category: [Authentication](https://www.assembli.design/category/authentication.md)
- Type: component
- Tags: sso, sign-in, login, saml, okta, enterprise, auth, email-first
- npm dependencies: motion, lucide-react
- shadcn/ui dependencies: @assembli/email-field, @assembli/text-field
- Added: 2026-10-24
- Live preview: https://www.assembli.design/preview/sso-sign-in
- Page: https://www.assembli.design/components/sso-sign-in

## Install

One-time setup (needs a subscription):

1. Add the registry to the project's `components.json`: `{"@assembli":{"url":"https://www.assembli.design/r/{name}.json","headers":{"Authorization":"Bearer ${ASSEMBLI_API_KEY}"}}}` (merge into `"registries"`).
2. Put an API key from https://www.assembli.design/account in `.env.local` as `ASSEMBLI_API_KEY=asm_…`.

Then install with the shadcn CLI (writes `components/sso-sign-in/sso-sign-in.tsx` and installs dependencies):

```bash
npx shadcn@latest add @assembli/sso-sign-in
```

Registry item JSON: https://www.assembli.design/r/sso-sign-in.json (send `Authorization: Bearer <api key>`)

## Code

> Component source needs an Assembli subscription ($12/month) and an API key sent as `Authorization: Bearer <key>`. To get one without copying anything, POST https://www.assembli.design/api/agent/login (or call the MCP tool connect_account), show the user the link it returns, and poll https://www.assembli.design/api/agent/token for the key. Or subscribe at https://www.assembli.design/pricing and create a key at https://www.assembli.design/account.