> ## Documentation Index
> Fetch the complete documentation index at: https://help.dingtalk.io/llms.txt
> Use this file to discover all available pages before exploring further.
# Sign In to DingTalk and DingMail with SSO
> Step-by-step guide to signing in to DingTalk and DingMail with single sign-on (SSO), using JumpCloud as the IDaaS example — from organization code to MFA verification.
If your organization has enabled single sign-on (SSO), you can use your work email account to sign in to DingTalk and DingMail — no separate password is needed for each product. This guide walks you through SSO sign-in in DingTalk, using **JumpCloud** as an example identity-as-a-service (IDaaS) provider. DingMail shares the same enterprise identity system, so sign-in works the same way when SSO is enabled.
The sign-in pages displayed during DingTalk sign-in vary slightly across IDaaS platforms (such as JumpCloud, Okta, Microsoft Entra ID, and Google Workspace), but the overall flow is the same (organization code → email and password → additional verification). If your organization uses a provider other than JumpCloud, follow the prompts on your actual sign-in page.
## Before you begin
Before signing in, check with your IT admin for the following information:
* Your **organization code** (provided by your IT admin to identify your company account).
* Your **work email account and password**.
* The **JumpCloud Protect** app or another authenticator app installed on your mobile device. If it is not installed yet, you will be guided through the installation and binding during your first sign-in.
## Sign in to DingTalk
Download the client for your platform from [www.dingtalk.io/download](https://www.dingtalk.io/download/). Supported platforms include Windows, macOS, iOS, and Android. Choose the version that matches your device.
Open DingTalk after installation. On the sign-in page, select **Continue with Enterprise Account**.
In the dialog that appears, enter the **organization code** provided by your IT admin, then click **Next**.
The organization code is a unique identifier issued by your IT admin after your organization enables SSO. Do not use someone else's organization code. If you lose or forget it, contact your IT department to get a new one.
Enter your **work email address** and **email password**, then click **SSO Login**.
The email and password here are managed by your organization's identity service (IDaaS, for example JumpCloud) and are not related to the DingTalk account system. If you forget your password, reset it through the **Forgot password** process of your company's IT system.
After you click **SSO Login**, if your organization requires multi-factor authentication (MFA), the Set Up MFA page appears. Select **JumpCloud Protect** from the list of MFA methods, and then click **Continue**. On the next page, select **I Have the App**.
If this is your **first sign-in** and the JumpCloud Protect app is not installed yet, the page will guide you to download JumpCloud Protect or another compatible authenticator app (such as Google Authenticator or Microsoft Authenticator) on your phone and complete the binding. Follow the on-screen prompts to finish the installation and first-time binding, then return to this step.
Open the **JumpCloud Protect app** on your phone and follow these steps to get a one-time verification code. If this is your first-time binding, tap **Add Account** and scan the **QR code** shown on the DingTalk sign-in page to complete device binding.
1. Find and tap the DingTalk entry to open the one-time verification code page.
2. Check the 6-digit verification code displayed on the screen. It is usually valid for 30 seconds.
3. Enter the 6-digit verification code into the verification code field of the DingTalk desktop sign-in window, then click **Confirm**.
4. After verification succeeds, your account is signed in with SSO.
For security reasons, authenticator apps generally do not allow screenshots of the verification code page, so no screenshot is provided for this step. Follow the instructions above on your phone instead.
After signing in, you can find members of your organization in DingTalk and start a conversation:
1. Click the search bar at the top of DingTalk desktop.
2. Type the contact's name.
3. Select the contact from the search results.
4. Type your message in the input box.
5. Press **Enter** or click **Send**.
## Sign in to DingMail
Open DingTalk desktop, click **Mail** in the left sidebar, enter your **DingMail address**, then click **Continue**.
Enter your work **email address** (not a DingMail address), then click **Continue**.
Enter your **email password**, then click **SSO Login**.
Enter the 6-digit verification code from your authenticator app.
After verification succeeds, **DingMail** is ready to use.
## FAQ
Contact your IT admin. Organization codes are assigned by the enterprise admin when your organization activates DingTalk Enterprise Edition.
The password used for SSO sign-in is managed by your organization's IDaaS platform (such as JumpCloud), not by DingTalk. Reset it through the "Forgot password" process of your company's IT system, or contact your IT admin for help.
TOTP verification codes refresh every 30 seconds. Make sure that:
* Time on your phone is set to sync automatically.
* You enter the code before it expires.
* You selected the correct entry for the account you are signing in with.
Contact your IT admin to reset your MFA binding in the JumpCloud console, then scan the QR code again on your new phone to rebind.
The overall flow is the same (organization code → email and password → verification code), but the sign-in authorization pages look different depending on the IDaaS provider (Okta, Microsoft Entra ID, Google Workspace, and so on). Follow the prompts on your actual page, or contact your IT department.