Who sets up sign-in?
The Pickit account owner connects the provider in Pickit. Your identity administrator handles Microsoft or Google consent and confirms the directory scope. Being an IT administrator does not by itself give access to the owner’s SSO controls.
Microsoft and Google connections are configured in Pickit’s SSO settings. For SAML or Okta setup, contact Pickit support.
If Microsoft displays “Need admin approval”, ask your Microsoft administrator to review the consent request. Reinstalling Pickit does not approve it.
Account owner: connect Microsoft or Google
- In Manage, open Settings → System Settings → SSO.
- Choose Microsoft (Entra) → Connect Microsoft Entra, or Google → Connect Google. Sign in to the organization you want to connect.
- Turn on Enable auto-invite if users should join the Pickit account when they sign in.
- To limit auto-invite, choose Restrict to domains. Microsoft also offers Restrict to AAD groups. Leaving a restriction blank allows all domains or groups in that connection.
- Ask a user in the selected audience to sign in and check that they can open the required libraries.
Membership and library access
Auto-invite adds account membership at sign-in. Library access still depends on the user’s role, groups and content permissions.
Removing someone from a directory and removing their Pickit access are different operations. Follow your offboarding process and check their Pickit membership.
For multiple tenants or inherited Family connections, contact Pickit support before replacing an existing connection.