Now Live: Single Sign-On — and Why "the Shared Password" Is a Jobsite Liability

Ask any facilities or construction IT manager how people actually sign in to their document tools, and you'll hear some version of the same confession: a shared login taped inside a job trailer, a password spreadsheet, or an inbox full of "can you reset my account?" requests every Monday.

As of today, Enterprise-plan ArchiveView organizations can retire all of that. SAML single sign-on is live — your team signs in with the company account they already have in Okta, Microsoft Entra ID (Azure AD), Google Workspace, or any SAML 2.0 identity provider.

Why SSO matters more in construction than in most industries

Most software treats SSO as an IT checkbox. On a construction project or a facilities team, it solves three problems that are painfully specific to the industry:

1. People churn faster than accounts do. Crews roll on and off projects monthly. Every departure is supposed to trigger an account cleanup in every tool — and it doesn't. Old accounts with access to current drawings are one of the most common findings in construction-industry security reviews. With SSO, offboarding is one switch at your identity provider: disable the person in Okta or Entra ID, and their ArchiveView access ends with everything else.

2. Shared passwords fail your audit. Hospitals, universities, municipalities, and utility owners increasingly require their vendors and their own facilities teams to show who accessed which record — a shared "trailer login" makes every audit trail worthless. SSO gives every person their own identity, so ArchiveView's existing audit logs actually mean something.

3. Nobody on a jobsite wants another password. The fastest way to get field teams to bypass your document system is to make signing in annoying. With SSO they click Sign in with company SSO, type their work email, and land in the same company login they use for everything else — including whatever MFA your IT team already enforces there.

How it works in ArchiveView

• For your team: on the sign-in page, click Sign in with company SSO, enter a work email, and finish at your company's own sign-in page. That's the whole flow.
• Auto-provisioning: the first time someone signs in through your identity provider, ArchiveView automatically adds them to your organization — with a read-only Viewer role by default, so access starts at least-privilege and admins promote from there. No invitation emails, no seat requests.
• For your admins: setup takes minutes in Admin Panel → SSO: paste your IdP's metadata URL (or the metadata XML), list your company email domains, pick the default role, done. ArchiveView shows the ACS URL and Entity ID your IdP needs on the same screen.
• MFA stays where it belongs: your identity provider enforces it. SSO users never juggle a second authenticator for ArchiveView.

Pairs well with per-project contractor access

SSO covers your people. For the subcontractors and consultants who come and go, ArchiveView's per-project contractor access stays the affordable answer — $199 per project, scoped to just that project's documents, removable the day the project closes. Between the two, there's no reason anyone should ever share a password again.

SAML SSO is included in the Enterprise plan alongside unlimited users, unlimited storage, and API access. Running Okta, Entra ID, or Google Workspace and want to see it with your own tenant? Contact sales for a guided setup, or request a demo.