Sign in with the identity your plant already uses.

A plant that has outgrown a shared password needs the maintenance system on the same login as email and the other tools IT already manages. MaintenanceIQ single sign-on does that. A planner, a technician, a stores clerk and a quality head sign in with the company identity. They do not keep a separate MaintenanceIQ password as the way in.

The login proves who the person is. It does not decide what they are allowed to do. That stays inside MaintenanceIQ: a role, the features and actions that role can use, the factories they belong to, and, if you turn it on, their departments. A technician who can sign in still sees only the work those rules allow.

Admins still create the member, set the role and choose the factories. Single sign-on connects that member to the company login. When IT disables the company login, that person can no longer enter. The member record, and the history they wrote, stay on the audit log.

Start with the people who already have a MaintenanceIQ member. IT names the identity provider the company uses for employee login. During setup we connect that login and match each person to the member you already created, so a successful company login opens the right factories and the right role.

Try it with one admin and one technician before you switch the whole site. The admin should land in the settings they already use. The technician should land on My Work for their factory, and nowhere else. If a person can see another site's work orders, the factory scope is wrong, and sign-on did not cause it. Fix the member, then try again.

Contractors and auditors who are not in your company directory can still be members with access you set by hand. Single sign-on covers the people your identity provider knows. Everyone else is an explicit member, with an explicit role, for as long as you leave them on.

• Connect the company identity your IT already runs
• Match each login to an existing member, role and factory
• Check one admin and one technician before the whole site
• Keep contractors as members you add and remove yourself

It does not replace the permission matrix. Two people in the same company directory can have completely different maintenance access, and they should. One may close work orders on one line. The other may only read the evidence pack. That difference is a MaintenanceIQ permission, and it survives sign-on.

It does not provision users by itself. Your admin still decides who is a member, which role they hold and which factories they belong to. Turning on the company login does not copy your whole directory into the CMMS.

It does not change the audit log. Every write is still recorded with who did it and when. A person who signed in through the company identity is the same named member on that log. Support still uses read-only impersonation when they need to see what you see, and they still cannot change your records.