Tresorit - Single Sign-On (SSO) Specific Terms

If Customer subscribes to a Service Plan which enables Customer to use the Single Sign-On authentication feature ("SSO"), and Customer’s Administrator sets up SSO in accordance with clause 5.1 of the Terms of Service, then Customer’s and its Administered Users use of Tresorit SSO is subject to the Tresorit Terms of Service and the following additional terms (these "Terms").

1. Single Sign-On: By setting up SSO, Customer acknowledges and agrees that SSO allows Administered Users to authenticate to Tresorit Services through a third-party identity provider ("Third-Party Identity Provider") instead of current Tresorit passwords. Customer understands and expressly agrees that, following the setting up of SSO, the relevant Administered Users will neither be able to login to the Tresorit Services with their Tresorit passwords, nor will be able to set up 2-Step Verification with Tresorit.
2. Third-Party Identity Providers: SSO allows Customers to connect and use the relevant Third-Party Identity Provider’s products, services, or software in conjunction with Customer’s use of the Tresorit Services ("Third-Party Services"). Customer’s use of SSO is limited to integration with one Third-Party Identity Provider. To enable SSO, Customer may be required to sign up or log into the services of such Third-Party Identity Provider on its respective website or application.
3. Confidentiality: Further to Clause 6.3 of the Terms of Service, you understand that as the Customer, you are responsible for maintaining the confidentiality of passwords and Customer accounts, including the setting up of SSO and the configuration of Third-Party Services. Customer represents that it has the requisite expertise to evaluate the suitability of feature and it has in fact undertaken its own investigation of the suitability of the feature for the Customer’s purposes and it has relied upon its own skill and judgement in enabling SSO for its business purposes in accordance with and subject to these Terms and the relating SSO documentation. Tresorit will not be liable if Customer sets up SSO and an unauthorized person gets access to Encrypted Data as a result of, or in connection with the integration with the Third-Party Service.
4. Service Data: By enabling the Tresorit Services to access the services of such Third-Party Identity Providers, Customer consents to Tresorit providing certain information to the Third Party Identity Provider and granting the Third Party Service permission to access or otherwise process such information as described in the SSO documentation, for the purposes of enabling SSO. You acknowledge that your use of such Third Party Service is governed solely by the terms and conditions and privacy policy of such Third Party Service (including, but not limited to, the Microsoft terms, Okta terms, and the Google terms).Tresorit does not endorse, is not liable for, and makes no representations as to the Third Party Service, or the manner in which such Third Party Service uses, stores, or processes your data. We are not liable for any damage or loss arising from or in connection with your enablement of such Third-Party Service. We are not responsible or liable for any changes to or deletion of your data as a result of, or in connection with the integration with the Third-Party Service.
5. Access Rights: Tresorit will make available SSO to Customer in accordance with these Terms, and grants to Customer a limited, non-sublicensable, non-exclusive, non-transferable right to allow its selected Administered Users to access and use SSO in accordance with the SSO documentation, solely for Customer’s business purposes.
6. Availability: The availability of SSO may depend on the availability of these Third-Party Services and their features and functionality. You understand and agree that we do not control Third-Party Service features and functionality, and Third-Party Services may change without any notice to us. If any Third- Party Service stops providing access to some or all of certain features or functionality, we may stop providing access to certain features and functionality of our Services. We will not be liable to you for any refunds or any damage or loss arising from or in connection with any such change made by the Third-Party Service.
7. Changes: Tresorit reserves the right to change the available Third-Party Identity Provider(s) at any time during Customer’s Subscription Period and/or to revoke SSO in accordance with Clause 1.3 of the Terms of Service. In such case, Customers will be notified with a thirty-day written notice prior to implementation unless such change is necessary to prevent imminent harm to Customer, Tresorit or the Services.
   
   Customer understands and agrees that, if Customer’s Administrator switches off SSO in respect of any Administered Users for any reasons or Tresorit no longer provides SSO in accordance with the above, then the relevant User(s) will be required to set up a Tresorit password.
8. Miscellaneous: These Terms shall be construed in accordance with the provisions of the Terms of Service. In case of any discrepancies between the Terms of Service and these Terms, the provisions of these Terms shall prevail.
   
   These terms are governed by Swiss law, excluding the Swiss conflict of law rules. The parties specifically exclude applicability of (i) the United Nations Convention on the Sale of Goods and (ii) any Incoterms.
   
   Any disputes arising out of or in connection with this agreement shall be decided by arbitration administered by the International Centre for Dispute Resolution (ICDR) in accordance with its International Arbitration Rules. The number of arbitrators shall be one (1) as shall be selected by the ICDR. The place of arbitration shall be Zurich, Switzerland. The language of the arbitration shall be English.