Signed-in users can also find this guide, with screenshots, under Help in the app.
Single sign-on is set up per organization and is part of the Enterprise plan. Your settings and secret stay with your organization only.
Open Settings and find Single sign-on. Copy the Redirect address shown.
In your provider (for Microsoft: Entra admin centre > App registrations), create a web application, add the redirect address, and create a client secret.
Back in ParkCommand, choose the Provider, enter the Directory (tenant) ID (Microsoft) or Issuer URL (others), the Client ID and Client secret, and your email domains. Select Save.
Prove you own each email domain: add the TXT record shown (name and value) in your domain's DNS, then select Verify domains. DNS changes can take up to an hour.
Select Test sign-in and sign in with a work account. When it works and a domain is verified, select Switch on.
Optional: tick Create accounts on first sign-in with a role for new people, and Require single sign-on to turn off passwords for your domains.