This guide will explain how to set up SSO for Gather 2.0. This service is compatible with any IdP that supports SAML or OIDC protocols, such as Okta, Microsoft Azure, Google, and OneLogin.

Getting Started with SSO

1. Once we've activated SSO for your space, click the Main Menu (Gather logo) and go to Settings

2. Click on the Security tab on the left navigation. Under Go to SSO dashboard, click Open dashboard.

   

3. Add your custom email domains (ex: @gather.town)

   

4. Verify ownership of your custom domains

   

   1. Log in to your domain provider:

      1. Start by logging in to the platform where you registered your domain, often called your domain registrar or domain provider (e.g., GoDaddy, Namecheap, Bluehost).

   2. Navigate to DNS Management:

      1. Look for an option such as "DNS Settings," "DNS Management," or "Manage Domains."

   3. Locate the TXT Records Section:

      1. Within the DNS Management area, find the section that allows you to edit or add TXT records

   4. Add a New TXT Record:

      1. Click an option like "Add Record" or "Create Record".

      2. Select "TXT" from the record type dropdown, if prompted.

      3. In the "Host" or "Name" field, enter the email domain you’re verifying.

      4. Copy the verification code from the Gather SSO Dashboard

      5. In the "Value" or "Text" field, paste the verification code from the Gather SSO Dashboard

   5. Save Changes:

      1. Click "Save" or "Add Record" to apply the changes.

   6. Wait for Propagation:

      1. DNS changes might take some time to propagate across the internet. This can be anywhere from a few minutes to 48 hours, but often it's much faster. The exact time depends on your domain registrar and the TTL (Time To Live) setting for your DNS records.

   7. Verify on Gather:

      1. Once you've added the TXT record, go back to the Gather SSO Dashboard.

      2. Click their "Verify" button for the domain you’re verifying.

5. Complete your SSO configuration with WorkOS (our 3rd-party SSO provider) by clicking on “Open WorkOS.”

   

   Tip: Working with a security team? Click Copy Link to share it so they can complete setup.

   

   Please note: After you complete SSO setup with WorkOS, all users signed in with one of your custom email domains will be signed out and required to sign back in via SSO.

   Admins are exempt from the forced sign-out in case of misconfiguration, but will be forced to sign in through SSO when their session expires.

6. Once the setup is complete, SSO is enabled for your space and you're ready to test

7. Sign out of your Gather account, then sign back in (make sure to click Continue with SSO) using one of your custom email domains

6. Have a few of your teammates try signing in via SSO and give us a final thumbs up that everything is working.

Linking SSO for Multiple Spaces

This allows members of your space to sign in via SSO once and become members of multiple spaces.

1. Follow the steps in the “Activating SSO” section above to activate SSO for Space 1.

2. Contact our support team at support@gather.town to request SSO and enablement for additional spaces.

3. Now, when members of your space sign in via SSO, they will become members of both spaces.

FAQ