Quickbooky

Accounting News

Security & Access

QuickBooks Online Single Sign-On: The Admin-Only Path That Works

Admins who cannot find single sign-on in QuickBooks Online are hitting a plan and role limit; the accepted fix runs through Intuit Account Manager.

COMMUNITY ISSUESQUICKBOOKY

QuickBooks Online teams that want staff to sign in with corporate credentials keep hitting the same wall. The single sign-on option never appears inside the product’s own settings, and for many subscriptions it is not available at all. We traced the accepted answer, and it maps a clear route: confirm your plan, confirm your admin role, then finish the setup in Intuit’s account console.

The tab most users never see

Single sign-on for these products is not configured inside QuickBooks. It lives in the Intuit Account Manager, the central console for Intuit identities, under a dedicated Single sign-on tab. Only the primary admin and company admin roles can see that tab. Everyone else who goes looking reports it as missing, which makes the problem look like a glitch when it is really a permissions gate.

The feature covers QuickBooks Online Accountant, Intuit Accountant Suite, and Intuit Enterprise Suite. Once it is live, your team signs in with the credentials your organization already uses. Your identity provider handles authentication, multi-factor prompts, and access policies, and nobody manages a separate Intuit password.

Which subscriptions include it?

For QuickBooks Online Accountant, Intuit Accountant Suite, and Intuit Enterprise Suite, single sign-on carries no extra charge. The core QuickBooks Online line is different. The accepted answer ties the capability to the Advanced tier. That plan also lets you build custom roles and fine-tune what each user can see and do across banking, sales, payroll, and other areas. That tier gate explains most of the confusion: when the option is absent, the answer is often the subscription, not the settings menu.

Three providers make the supported list

Intuit currently supports Microsoft Entra ID (formerly Azure AD), Google Workspace, and Okta. The vendor says more providers are planned, though it has not said which ones or when. If your organization runs a different identity platform, there is no configuration path today. Verify this list before any setup work, because the guided flow assumes one of the three.

The setup, step by step

The accepted solution walks through Intuit Account Manager, and the flow is short once you know where it starts:

  1. Sign in to the Intuit Account Manager, the central account console for Intuit identities.
  2. Select the Single sign-on tab. If you cannot see it, you are not signed in as a primary admin or company admin.
  3. Follow the guided steps, then select the companies you want to bring under single sign-on.
  4. Choose who finishes the identity provider configuration:
  • Handle it yourself, in the same session, if you are also your organization’s IT admin or comfortable with the technical side.
  • Or invite your IT admin, and Intuit sends them an email invitation to complete the configuration.

The invitation route matters for firms without in-house IT staff. Intuit handles the handoff by email, and your IT admin finishes the provider-side setup in their own tools.

After the connection is in place, your users authenticate against your own identity provider. Intuit steps out of the password business for those accounts, and your organization’s security rules apply automatically.

Lifecycle management closes the access gap

Single sign-on is only half the picture. Intuit also supports automatic user lifecycle management through a provisioning standard known as SCIM. Your identity provider creates new users and removes departing ones directly, with no manual Intuit account housekeeping on either end. New starters get access without a separate create step.

The security payoff is immediate deprovisioning. The moment a user is deactivated in your identity provider, their access to Intuit data ends. There is no lingering account, and no former employee who can still open the books.

If the option still will not appear

Three checks resolve most reports. Confirm you hold the primary admin or company admin role. Confirm your subscription is one of the three products where single sign-on is included, or the Advanced tier on the standard QuickBooks Online line. Confirm your identity provider is Entra ID, Google Workspace, or Okta. Miss any one of those and the tab stays hidden, by design.

The wider lesson for admins: this setting belongs to the account layer, not the accounting software. Once you look in the right console, with the right role, the guided flow does the rest.

← Back to Community Issues