Single Sign-On

GolfCartOps supports single sign-on (SSO) so your staff can log in using their existing Google, GitHub, or other provider accounts instead of managing a separate password.

Supported Providers

Out of the box, GolfCartOps supports:

• Google -- Ideal for teams already using Google Workspace
• GitHub -- Useful if your technical team manages the account
• Additional providers including Facebook, Discord, and Microsoft can be enabled on request

How SSO Works

1. On the sign-in page, staff members click "Continue with Google" (or their configured provider)
2. They authenticate with their existing account
3. GolfCartOps creates or links their account automatically
4. They land on the dashboard with their assigned roles and locations

The first time someone signs in with SSO, their account is created and linked to any pending invitation. If they were previously invited by email, the system matches them automatically.

Benefits of SSO

• Faster access -- No separate password to create or remember
• Better security -- Leverages the provider's security features including two-factor authentication
• Easier onboarding -- New staff members can start immediately without a password setup step
• Centralized control -- If you disable someone's Google Workspace account, they lose access to GolfCartOps too

Combining SSO with Email Login

SSO does not replace email/password login -- both methods work side by side. Staff members can choose whichever method they prefer. A single account can use both, so someone who initially signed up with email can later link their Google account.

When to Use SSO

SSO is most valuable when:

• Your team already uses Google Workspace or Microsoft 365
• You want to reduce password-related support requests
• You need to enforce your organization's existing security policies
• You are onboarding seasonal staff quickly and want minimal friction

Security Considerations

• SSO providers handle password security, two-factor authentication, and session management
• GolfCartOps never sees or stores provider passwords
• If a staff member leaves, revoking their Google account immediately blocks GolfCartOps access
• SSO sessions follow the same timeout policies as standard email/password sessions

Tips

• Encourage your team to use Google sign-in if you already use Google Workspace -- it eliminates one more password to manage
• For maximum security, ensure your staff has two-factor authentication enabled on their Google or provider account
• You can always fall back to email/password login if a provider is temporarily unavailable