Require Google or Microsoft Sign-In for Your Firm

On the Max plan, your firm can require everyone whose email address is on your firm's domain (for example, everyone at @smithlaw.com) to sign in to GleanMark with your firm's own Google Workspace or Microsoft 365 account. Once it is on, other ways of signing in are refused for those addresses.

What it changes

For people whose email address is on your firm's domain:

• Allowed: signing in with your firm's Google Workspace or Microsoft 365 account.
• Refused: one-time email codes, API keys, and personal Google or Microsoft accounts.

This applies in the GleanMark app and when connecting ChatGPT or Claude to GleanMark. People in your workspace whose email address is on a different domain are not affected.

How to turn it on

GleanMark turns it on for your firm at the request of a firm owner or admin. Send the request from the Contact page with:

1. Your firm's email domain (or domains).
2. Whether your firm uses Google Workspace or Microsoft 365. For Microsoft 365, include your Tenant ID, which your IT administrator can find in the Microsoft Entra admin center under Overview.
3. Any addresses that should keep their usual sign-in method, such as a fallback administrator account.

We confirm the domain belongs to your firm, then turn the requirement on in a watch-only mode first. Watch-only refuses nothing and shows us who would be affected, so anyone who would be locked out can be sorted out before the requirement takes effect. Then we turn it on.

What your members see

Someone who tries a refused sign-in method sees a message that starts with Sign-in policy: and names your firm, for example:

Sign-in policy: Smith Law requires signing in with Microsoft using your smithlaw.com account.

If a member once signed in with a personal Google or Microsoft account using their work address, they see an extra line asking them to contact their administrator or GleanMark. Get in touch from the Contact page and we can sort it out.

ChatGPT and Claude connections

• API keys stop working for members on your firm's domain. To keep using GleanMark in ChatGPT or Claude, they connect by signing in with their GleanMark account, which goes through your firm's Google or Microsoft sign-in.
• Connections made before the requirement started need to be reconnected once. The assistant asks the member to sign in again.

Turning it off

Ask from the Contact page and we switch it off. Members can then sign in their usual way again.

What is not supported yet

SAML single sign-on providers such as Okta, OneLogin and Ping are not supported yet. The requirement works with Google Workspace and Microsoft 365 accounts only.

Related Features

• API Access — API keys and connecting AI assistants
• Organization Settings — Automatic sign-out and other firm-wide settings
• GleanMark Plans & Features — What the Max plan includes