---
title: "FAQ SSO"
canonical: "https://support.mercell.com/space/MNS/563183815/FAQ%20SSO"
format: markdown
---
We have collected our most frequent asked questions for our single sign on solution here


<details>
<summary>Connect one AD to multiple Mercell accounts</summary>

If you need to connect one AD containing multiple organizations to Mercell then you need to

**On ADFS/Azure system setup**  
You should only create one connection/app in your ADFS/Azure. All users should share this single connection to Mercell.

You need to grant users permissions to use connection/app.

**On Mercell SSO setup**  
Login to each [my.mercell.com](http://my.mercell.com) receiving account and create the connection to your ADFS/Azure.

Setup the first account as described. The next account(s) should use same **Federation domain** as your ADFS/Azure setup on the first account.

You must select the **Match e-mail to domain**, and he **Email domain** must be set and different on each account in Mercell. 

When a user is logged in Mercell will find the correct account by matching the domain on the users email with the **Email domain** entered in the Mercell SSO setup. It is only possible to divide users on their email domain, not on other properties.
</details>

<details>
<summary>Can new users be created on a department</summary>

No this is currently not possible, all users will be created without a department link. After the user has been created in Mercell, then its possible to move the user to a department
</details>

<details>
<summary>Can semi anonymous users be connected to a department</summary>

No this is currently not possible.
</details>

<details>
<summary>E-mail is not set in SAML sent to Mercell</summary>

Check if the email attribute of the user is set in your AD
</details>

<details>
<summary>Assertion did not validate. We're trying to automatically update the certificate.</summary>

This means that the Federation domain contains incorrect setup and a new link must be entered in Mercell by clicking "Update", remove the old link, enter the new one and save the information. The new link can be found in the setup of the customer in their AD.
</details>