Skip to main content
Learn how to configure Google SSO enforcement for your Cantina organization. This document explains how to enforce Google OAuth/SSO authentication for users in the your-company.com email domain.

​
Where to Configure

To configure this setting, navigate to: Organization Settings → Single Sign-On
Screen Shot 2026 04 15 At 5 35 37 PM

​
Create SSO Enforcement Rule

  1. Select Add SSO Enforcement Rule.
    Screen Shot 2026 04 15 At 5 35 59 PM
  2. In Email Domain, enter:
    • your-company.com
  3. Create rule

​
Expected Behavior

Once enabled, all users with an email address ending in @your-company.com will be required to sign in using Google SSO. Users will no longer be able to authenticate with password-based login methods for this domain.