> ## Documentation Index > Fetch the complete documentation index at: https://docs.abliteration.ai/llms.txt > Use this file to discover all available pages before exploring further. # Single sign-on > Configure single sign-on for your Enterprise organization. Single sign-on (SSO) is available for Enterprise organizations. Connect your identity provider, such as Okta, Microsoft Entra ID, or Google Workspace, so members can use their company accounts to sign in to Abliteration. SAML and OpenID Connect (OIDC) are supported. ## Prerequisites You need: * An Enterprise organization. To enable SSO for your organization, contact [help@abliteration.ai](mailto:help@abliteration.ai). * The **Owner** or **Admin** role in that Abliteration organization. * Access to your company's DNS settings, or help from an IT administrator who manages them. * Administrator access to your identity provider. > [!WARNING] > > Once setup is complete, users on your company domain must sign in with SSO, including when accessing a Personal organization with their company email. Tell members about the change and assign them to your identity-provider application before completing setup. Existing sessions will require a new SSO sign-in. ## Set up SSO ### 1. Open Security settings Sign in to [Console](https://abliteration.ai/console/settings?tab=security) as an organization Owner or Admin. Select your company organization and open **Settings → Security**. Find the **Single sign-on** section. If you see **Contact sales** or **Contact support**, select it to request access to SSO setup. ### 2. Verify your company domain Select **Verify company domain** and follow the setup wizard’s instructions to add a verification record with your DNS provider. ### 3. Configure your identity provider After verification, return to **Settings → Security** and select **Set up SSO**. To resume an unfinished setup, select **Continue setup**. Choose your identity provider and follow the instructions in the wizard: 1. Create an application in your identity provider using the configuration values shown in the wizard. 2. Assign the users who need access, including the Owner or Admin completing setup. 3. Complete the provider configuration in the wizard. Use each person's existing Abliteration email address to preserve access to their account. For additional provider details, see the [identity provider guides](https://workos.com/docs/integrations). Always use the configuration values from your Abliteration setup wizard. > [!NOTE] > > Google Workspace SSO requires this setup. Selecting **Continue with Google** on the sign-in page does not enable company SSO. ### 4. Test sign-in Select **Test sign-in** in the wizard. Sign in as an assigned user and complete any verification required by your identity provider. ![Abliteration setup portal showing an activated SAML connection, its verified example domain, IT contact, and Test sign-in button](https://mintcdn.com/acme-c0f07daa/JKo7eQM4XA164Tby/images/sso/connection-activated.jpg?fit=max\&auto=format\&n=JKo7eQM4XA164Tby\&q=85\&s=06f2ffcca4c34fdd615159b25388f669) An example SAML connection after setup. Return to **Settings → Security** and confirm that **Sign-in policy** reads **Company SSO required**. Select **Refresh status** if the page has not updated. You may be prompted to sign in again through SSO. ## View or manage your configuration Organization Owners and Admins can open **Settings → Security → Manage SSO** to review the connection, update its configuration, or manage IT contacts. Security settings show your company domains, sign-in policy, and default role for new employees. Your identity provider manages two-factor authentication for company SSO. ![Example Enterprise Security settings showing Manage SSO, Company SSO required, the Member role for new employees, and two-factor authentication managed by the identity provider](https://mintcdn.com/acme-c0f07daa/JKo7eQM4XA164Tby/images/sso/security-settings.jpg?fit=max\&auto=format\&n=JKo7eQM4XA164Tby\&q=85\&s=289c328a71d380226c67cbe38ecd8430) Security settings after SSO activation, with Connection details expanded. ## Sign in with SSO 1. Open the [sign-in page](https://abliteration.ai/sign-in). 2. Enter your work email and select **Continue**. You can also select **Sign in with SSO** and enter your work email there. 3. Authenticate with your company's identity provider and complete its verification steps. Use the email address associated with your existing Abliteration account. You do not need to create another account. If you were invited with an email outside the company's domains, open your invitation and follow the organization's SSO prompts. ## Sign-in and access * Once your domain is verified and the connection is active, company SSO is required. There is no separate enforcement toggle. * Existing members keep their accounts, organization roles, and project access. Enabling SSO does not transfer Personal projects to your organization. * New employees on a verified company domain can join by signing in with SSO. They receive the **Member** role; an Owner or Admin assigns project access separately. * External guests need an Abliteration invitation and access to your company's identity-provider application. Manage roles and project access in **Members**. SSO does not synchronize identity-provider groups or roles. To remove someone's organization access, remove them from **Members** as well as your identity-provider application. ## Multiple domains Contact [help@abliteration.ai](mailto:help@abliteration.ai) to add company domains to your SSO setup. Verify each domain separately and configure the corresponding users in your identity provider. ## Troubleshooting ### No SSO configured for this domain Check your email address and ask an organization Owner or Admin to confirm that your domain is verified and SSO setup is complete. Contact [help@abliteration.ai](mailto:help@abliteration.ai) if you need SSO enabled. ### Domain verification is still pending Check the TXT record name and value against the wizard's instructions. Some DNS providers append your domain to the record name automatically; avoid entering it twice. Allow time for DNS changes to propagate, then check again. ### User is not assigned to the application Ask your IT administrator to assign you to the Abliteration application in your identity provider. Confirm that the application sends the same email address as your Abliteration account. ### You can sign in but cannot open a project New employees join as Members without automatic project access. Ask an organization Owner or Admin to grant access in **Members**. ### Company sign-in is unavailable Ask your IT administrator to check the connection and, for SAML, whether its certificate has expired. If no Owner or Admin can sign in, contact [help@abliteration.ai](mailto:help@abliteration.ai). Company SSO remains required while the issue is resolved. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.