Google Sign-In
How Google sign-in works in Recomly — no setup required.
Recomly has Sign in with Google built in for all users. There is no admin setup required and no plan upgrade needed — the Google button appears on the login page for every Recomly account.
How it works
New users (self-serve sign-up)
If someone clicks Sign in with Google and does not already have a Recomly account, Recomly creates their account and organization automatically the first time they authenticate. No invitation is required.
Existing email/password users
If a user already has a Recomly account with an email/password, they can link their Google identity by clicking the Sign in with Google button on the login page. Recomly detects the matching email address and links the Google identity to their existing account. After linking, they can sign in with either their password or Google.
Important: identity linking is permanent
Once a Google account is linked to a Recomly account, the link cannot be removed through the app. The password reset flow stops working for linked accounts — Recomly routes password operations through the federated identity instead.
If a user accidentally linked the wrong Google account, the only recovery path is:
- Delete the user in Recomly.
- Re-invite them so a fresh account is created.
See Break Glass Access for how this affects emergency access accounts.
Does Google Workspace matter?
Both Google Workspace (formerly G Suite) accounts and personal Gmail accounts work with Recomly's Google sign-in. Recomly does not restrict sign-in to a specific Google domain — access is controlled by the Recomly invitation and seat limit system, not by the Google account type.
Inviting a user who will sign in with Google only
When inviting a user who will sign in exclusively with Google, you can disable password login on the invite form. With password login off, no temporary password is created and no invitation email is sent — the user's only sign-in path is the Sign in with Google button.
The user must complete the Google sign-in flow to gain access. With password login disabled there is no fallback. If the user never clicks Sign in with Google, or if their Google account is unavailable, they cannot access Recomly. Make sure the user knows to sign in via Google — you may want to notify them out-of-band since no invitation email is sent.
The first time the invited user signs in with Google, Recomly links their Google identity to the pre-created account. There is a one-time redirect back to the login page — this is expected. See First-time sign-in for invited users for details.
Google sign-in vs. enterprise SSO
Google sign-in is not the same as configuring Google Workspace as a SAML or OIDC provider in the SSO Providers section. The SSO Providers section is for enterprise identity providers (Okta, Azure AD, etc.) and requires a plan that includes the SSO feature. Google sign-in is separate, always on, and requires no configuration.