> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/configuration-center/sso.md).

# SSO

This module enables organizations to integrate external identity providers for Single Sign-On (SSO) within the platform. Currently, only SAML based SSO implementations are supported. You add a provider by uploading its metadata, then configure user and role mappings. When a provider is enabled, the login page shows a **Login with** button carrying the provider's name (for example **Login with azure-saml**). When more than one is enabled, the button reads **Login with SSO** and opens a **Select SSO Provider** window. Once set up, users can authenticate through their organization's existing identity systems.

Open **Configuration Center > SSO > Manage**. The **SSO Providers** page lists the configured providers with their **Name**, whether they are **Enabled**, and their **Type** (`SAML`). Click **New Provider** to add one. Use the ⋯ menu of a row to **Edit** or **Delete** a provider. Managing providers requires the SSO Settings permissions (`ReadSsoConfig`, `WriteSsoConfig`, `DeleteSsoConfig`).

Start with the Forestall-side settings, then follow the guide for your identity provider:

{% content-ref url="/pages/gfldIWFKtuG1FPFUpbja" %}
[Forestall Configuration](/forestall/configuration-center/sso/fsprotect-configuration.md)
{% endcontent-ref %}

{% content-ref url="/pages/pK3iCs2xtfj4CkZUjqkx" %}
[OneLogin Configuration](/forestall/configuration-center/sso/onelogin-configuration.md)
{% endcontent-ref %}

{% content-ref url="/pages/pxsvSvip8SDgEbGgkRdC" %}
[MonoSign Configuration](/forestall/configuration-center/sso/monosign-configuration.md)
{% endcontent-ref %}

{% content-ref url="/pages/JEcLY2jiN38HnZqjcnKf" %}
[Azure Configuration](/forestall/configuration-center/sso/azure-configuration.md)
{% endcontent-ref %}