---
title: "Troubleshooting Sign-in, SAML and SSO"
type: "guide"
url: "https://docs.spur.us/knowledgebase/guides/troubleshooting-sign-in-saml-sso"
category: "Plans, Support & Compliance"
product: "general"
difficulty: "beginner"
estimatedTime: "4 minutes"
publishedAt: "2026-10-16T00:00:00.000Z"
updatedAt: "2026-10-16T15:28:41Z"
---

# Troubleshooting Sign-in, SAML and SSO

Can't sign in to Spur? Work through the common causes: how sign-in works, corporate email checks, password resets, finding your organization, and SAML single sign-on.

## Prerequisites

- A Spur account, or an invitation to one

## Outcomes

- Know how to sign in and reset your password
- Fix the most common reasons you can't sign in or can't see your organization
- Resolve sign-in problems when SAML single sign-on is on

## Step 1: Check how you sign in

Sign in at app.spur.us with your email address and either your password or a one-time code sent to that address. Spur doesn't offer Google or other social sign-in.

If your organization uses SAML single sign-on (SSO), entering your work email sends you to your company's identity provider (IdP) instead. See the SSO step below.

## Step 2: If you're asked to use a corporate email

Spur accounts need a work email address. These are blocked at sign-up:

Personal and free email providers, such as Gmail or Yahoo

Disposable email addresses

Addresses with a plus sign, such as name+spur@example.com

If you used your work address and still see the message, see Why am I asked to use a corporate email even though I did?.

## Step 3: Reset or change your password

To reset a forgotten password, use the password reset option on the sign-in page and enter the code sent to your email. Passwords need at least 8 characters.

Once you're signed in, change your password under Settings → Security. If you joined through SSO and never set a password, the button says Set password.

If a sign-in or reset code doesn't arrive, check your spam or quarantine folder, and ask your IT team whether your email filters are holding it.

Spur doesn't offer authenticator-app or SMS two-factor sign-in. To require multi-factor authentication (MFA), use SAML SSO and enforce MFA in your IdP.

## Step 4: If you can't see your organization

Sign in with the same email address your invitation was sent to. If you signed up on your own instead of through an invitation, you won't be in your company's organization yet, and Spur asks you to create one. Don't create a new organization: ask an admin of your company's organization to invite you.

Admins can add a verified domain under Settings → Organization so that anyone who signs up with that domain is prompted to join. See I can't find my organization or my invitation isn't working and How do I invite a team member?.

## Step 5: If SAML single sign-on is on for your domain

SAML SSO is available on Pro and Enterprise plans. Once it's enabled, everyone who signs in with an email address on the connection's domain, admins included, is sent to your IdP and can't sign in with email and password. Subdomains and other domains aren't affected.

Your IdP turns you away: you haven't been given access to the Spur application in your IdP. Ask your IdP admin to assign it to you. You don't need to be added in Spur first: new users are created the first time they sign in through SSO, with the member role, and existing accounts are linked by email address, so you keep your organization and history.

"mail attribute missing" error: the attribute names in your IdP and in Spur don't match. See Troubleshooting in the SAML setup guide.

Turn SSO off for now: an admin can go to Settings → Organization, select Configure next to SAML, and choose Disable SAML. The configuration is kept, and email and password sign-in works again.

For setup, see the SAML setup guide.

## Step 6: Still stuck?

Contact support@spur.us with:

The email address you're signing in with

The exact error message, and roughly when you saw it

Whether your organization uses SSO, and which IdP