Does Vacation Tracker offer SSO (Single Sign-On)?

Yes — and for most teams, it's already on. If your account uses the Slack, Microsoft Teams, or Google Workspace integration, you're signing in via SSO automatically: Vacation Tracker hands you off to your identity provider for authentication and trusts whatever they say. No separate VT password to manage.

Which Integrations Use SSO?

Three of Vacation Tracker's four sign-in paths are SSO-backed by default. The fourth (Email Only) uses VT's own login with optional MFA on top.

What That Means in Practice

• No separate VT password for Slack / Teams / Google users — your identity provider is the single source of truth, so password rotations, complexity rules, and recovery all happen there.
• Off-boarding is mostly automatic — when IT removes someone from your Slack workspace, Microsoft tenant, or Google Workspace, they lose access to Vacation Tracker on the next directory sync, and the User account moves to the Deleted tab on the Users page. If the sync hasn't run yet, an Admin can force it by clicking Sync Existing Users at the bottom-right of the Users page — that pulls the latest directory state and moves the removed person to Deleted right away. You don't need to deactivate them manually; deletion happens automatically once the sync runs.
• Provider-side controls apply — if your org enforces MFA, conditional access, IP allowlists, or device compliance at the Slack / Microsoft / Google level, those rules cover Vacation Tracker too. There's nothing extra to configure inside VT.

Multi-Factor Authentication (MFA) for SSO Users

For Slack, Microsoft Teams, and Google Workspace integrations, MFA is configured in the identity provider's settings, not inside Vacation Tracker. Whatever MFA policy the provider enforces — TOTP app, SMS code, security key, push notification — runs at the provider login step before VT sees you. Set it up here:

Common Questions