Account

SSO & Other Products

Your GrowthOS account is the single identity for all SalesShuru products. Sign in once and switch between CRM, QuickHire, Chat, and LeadOS without re-entering credentials.

How SSO works

The GrowthOS Plan workspace (growthos.salesshuru.com) has a sidebar with links to every SalesShuru product. Clicking a product link:

  1. GrowthOS generates a 60-second single-use SSO token (signed with a shared secret)
  2. Opens the product in a new tab with the token in the URL
  3. The product validates the token against the GrowthOS API
  4. Creates or finds your account in that product and issues a local session
  5. You land directly on the product dashboard — no login screen

Products you can access via SSO

ProductDomainWhat it does
CRMcrm.salesshuru.comSales pipeline, contacts, deals, email, SMS, telephony
QuickHirequickhire.salesshuru.comAI hiring platform — job posts, candidates, pipeline
Chatchat.salesshuru.comInternal team messaging, channels, DMs, voice/video
LeadOSleados.salesshuru.comAI outbound engine — prospect, research, send

SSO tokens are single-use

Each SSO token is valid for 60 seconds and can only be used once. If you copy the URL and try to open it in a second tab, the second use will fail. This prevents token replay attacks.

Enterprise SSO (SAML / OIDC)

Enterprise plan customers can configure SAML or OIDC SSO with their own identity provider (Okta, Azure AD, Google Workspace). Go to Settings → Security → SSO to set up. Enterprise SSO is separate from the SalesShuru cross-product SSO above — it controls how your team logs into GrowthOS itself.

SCIM provisioning (Enterprise)

Auto-provision and deprovision users from your identity provider via SCIM 2.0. When an employee joins or leaves, their GrowthOS account is created or deactivated automatically. Configure in Settings → Security → SCIM.