# SAML Single Sign-On (SSO) Setup

### Authentication

You can use your company's identity management system to let employees sign in to Fenixpyre with their corporate credentials. This simplifies user provisioning for Fenixpyre. Fenixpyre supports integration with any SAML-based Single Sign-On (SSO) system. You can use your Enterprise Identity Provider, such as Azure Active Directory or Okta, for SSO.

### User authentication and provisioning for SSO

When Single Sign-On (SSO) is set up, users are automatically given a new Fenixpyre account the first time they log in through SSO.

The sign-in process works as follows:

1. Users select SSO to log in and are redirected to their identity provider for authentication.
2. The identity provider confirms authentication and sends the required data to Fenixpyre servers to create the user.
3. Fenixpyre checks its directory for the user.
4. If the user already exists, Fenixpyre grants the appropriate access. For new users, Fenixpyre adds them to the directory and redirects them to the Fenixpyre app with the correct access.

### Pre-requisites to setup SAML Single Sign-On (SSO)

Security Assertion Markup Language (SAML) is a login standard that allows users to access applications using sessions from another context. It provides a secure and user-friendly Single Sign-On (SSO) authentication method, improving security and user experience compared to traditional username and password logins.

Before setting up SAML Single Sign-On (SSO), ensure you meet the following prerequisites:

* Access to the Fenixpyre admin dashboard
* Administrator access to the Azure Active Directory portal or the Okta admin portal


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fenixpyre.com/fenixpyre-for-admins/admin-dashboard/identity-and-provisioning/saml-single-sign-on-sso-setup.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.