How it plays out on a deal
SSO lets an organization apply its own password rules, second factor and offboarding to the data room. When an employee leaves, disabling their company account also removes their room access, which closes a gap that manual user lists leave open.
It is most useful for the room owner's internal team and for repeat users such as a corporate development group. Outside bidders normally log in with the room's own accounts, so check that SSO and regular logins can work side by side in one room.
What to check in a review or demo
- 1Which identity providers and standards are supported, and on which plan.
- 2Whether SSO users and invited outside users can share a room.
- 3Whether user accounts can be created and removed automatically from the identity provider.
Single sign-on: where the reviewed providers stand
From the twelve-item feature checklist in our reviews: a provider counts only if the feature ships natively. Read the review for how it works and on which plan.
Yes (7)
iDealsSingle sign-on9.1/10
DatasiteSingle sign-on8.9/10
AnsaradaSingle sign-on8.6/10
IntralinksSingle sign-on8.6/10
BoxSingle sign-on8.1/10
Citrix ShareFileSingle sign-on8.0/10
ShareVaultSingle sign-on7.7/10
No (11)
ElltySingle sign-on9.2/10
FirmexSingle sign-on8.5/10
DroomsSingle sign-on8.3/10
SmartRoomSingle sign-on8.2/10
DealRoomSingle sign-on8.0/10
CapLinkedSingle sign-on7.7/10
SecureDocsSingle sign-on7.7/10
OnehubSingle sign-on7.5/10
Venue by DFINSingle sign-on7.2/10
DigifySingle sign-on6.9/10
DocSendSingle sign-on6.6/10
7 of 18 reviewed providers qualify. Each chip shows the provider's overall review score.
Read alongside
- Two-factor authentication (2FA)A login that needs a second proof of identity besides the password, such as a code from an authenticator app, a text message or a hardware key.
- Role-based access control (RBAC)An access model in which rights come from a user's role, such as administrator, contributor or viewer, rather than being granted to each person one by one.
- IP allowlistingRestricting room access to approved network addresses, such as a firm's office or VPN ranges, so logins from anywhere else are refused.
- API accessA documented programming interface that lets other systems create rooms, move files, manage users or pull reports from the data room automatically.