Skip to main content
Surfaice authentication is handled through your company’s identity provider.

​
End users

  1. Visit agent.surfaice.pro.
  2. Choose your organization’s sign-in method when prompted.
  3. Complete any MFA challenge required by your identity provider.
If sign-in fails, try your corporate SSO portal first, then retry Surfaice. Persistent failures usually mean your account has not been provisioned into a Surfaice workspace yet — ask your Surfaice administrator.

​
Administrators

Surfaice supports single sign-on with providers such as:
  • Microsoft Entra ID (Azure AD)
  • Google Workspace
  • Other SAML / OIDC providers (as configured for your tenant)
Multi-factor authentication is supported and can be enforced at the tenant level through your IdP policies. Role-based access inside Surfaice controls:
  • Which data scopes a user can reach
  • Which connectors a role is allowed to use