Invoca allows for single sign-on to be orchestrated by an identity provider by utilizing the SAML protocol. Documentation for configuring your SAML single sign-on integration can be found here.