# Set up single sign-on (SSO)

> Let your team sign in with Okta, Microsoft Entra ID or Google Workspace using SAML 2.0.

Source: https://helpdox.fekbd.com/docs/acme-cloud/account-team/single-sign-on/

Single sign-on is available on the Business and Enterprise plans. Once enabled, members sign in through your identity provider and new employees can join automatically.

## Before you start

- You need the Owner role in Acme Cloud.
- You need admin access to your identity provider.
- Verify your company domain under **Settings → Domains**.

## Connect your identity provider

### Okta

1. In Okta, add a new SAML 2.0 app named “Acme Cloud”.
2. Paste the **ACS URL** and **Entity ID** shown on Acme Cloud’s SSO page.
3. Copy Okta’s metadata URL back into Acme Cloud and click **Test connection**.

### Microsoft Entra ID

Create an Enterprise application, choose SAML and follow the same steps. Map the `email` claim to the user principal name.

## Enforce SSO

After a successful test, turn on **Require SSO**. Members who signed up with a password will be asked to sign in through your provider next time.

Warning

Keep at least one owner account with a password and two-factor authentication as a break-glass account.