> ## Documentation Index
> Fetch the complete documentation index at: https://smartcar.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Single Sign-on (SSO)

> Smartcar offers SSO through your identity provider (IdP) for Enterprise customers.

## About SSO with Smartcar

Our Dashboard supports SSO integrations with popular identity providers
including:

* Okta
* Microsoft Azure AD
* Google Workspace
* OneLogin
* Ping Identity
* ADFS
* Custom SAML 2.0 providers

To set up SSO for your organization's Dashboard accounts, you'll need to:

1. Be an Owner for an existing Team on an Enterprise plan
2. Verify your domain
3. Configure your identity provider

The following section will guide you through each step of this process.

## Setting up SSO

On Dashboard navigate to **Team settings > Security** and select **Enable SSO**

<Frame>
  <img src="https://mintcdn.com/smartcar-docs/klvdxjd2EpHsqsG2/images/dashboard/sso/enable-sso.png?fit=max&auto=format&n=klvdxjd2EpHsqsG2&q=85&s=25cb9f378d60084f216d0c8341d0d846" alt="" width="1417" height="517" data-path="images/dashboard/sso/enable-sso.png" />
</Frame>

You’ll be redirected to start the SSO configuration process.

<Frame>
  <img src="https://mintcdn.com/smartcar-docs/klvdxjd2EpHsqsG2/images/dashboard/sso/verify-domain-1.png?fit=max&auto=format&n=klvdxjd2EpHsqsG2&q=85&s=d2163f376519a4a27ccedd07910091e1" alt="" width="1061" height="705" data-path="images/dashboard/sso/verify-domain-1.png" />
</Frame>

Depending on your DNS provider, you'll receive instructions on how to verify your domain.

<Frame>
  <img src="https://mintcdn.com/smartcar-docs/klvdxjd2EpHsqsG2/images/dashboard/sso/verify-domain-2.png?fit=max&auto=format&n=klvdxjd2EpHsqsG2&q=85&s=8a522104b3e4c392add44c7b7670a8b5" alt="" width="516" height="1016" data-path="images/dashboard/sso/verify-domain-2.png" />
</Frame>

Once your domain is verified, you’ll be able to select your Identity Provider
(IdP).

<Frame>
  <img src="https://mintcdn.com/smartcar-docs/klvdxjd2EpHsqsG2/images/dashboard/sso/select-idp.png?fit=max&auto=format&n=klvdxjd2EpHsqsG2&q=85&s=cc58d3e1c79ea46ba0ac7d0879cc2f8c" alt="" width="1145" height="486" data-path="images/dashboard/sso/select-idp.png" />
</Frame>

You'll be provided a guide on how to get set up based on your IdP.

<Frame>
  <img src="https://mintcdn.com/smartcar-docs/klvdxjd2EpHsqsG2/images/dashboard/sso/config-idp.png?fit=max&auto=format&n=klvdxjd2EpHsqsG2&q=85&s=5b175cde2bc4e00277c17b3d63a84e53" alt="" width="1058" height="588" data-path="images/dashboard/sso/config-idp.png" />
</Frame>

Once you’ve got everything configured, you’ll be prompted to test SSO.

<Frame>
  <img src="https://mintcdn.com/smartcar-docs/klvdxjd2EpHsqsG2/images/dashboard/sso/test-sso.png?fit=max&auto=format&n=klvdxjd2EpHsqsG2&q=85&s=2dc072fb8b8c9b3dd933091bb0ffa8a7" alt="" width="1058" height="366" data-path="images/dashboard/sso/test-sso.png" />
</Frame>

<br />

<Tip>
  If you exit the flow at any time before finalizing your configuration, you
  can jump back in from Dashboard.
</Tip>

<Frame>
  <img src="https://mintcdn.com/smartcar-docs/klvdxjd2EpHsqsG2/images/dashboard/sso/sso-config-pending.png?fit=max&auto=format&n=klvdxjd2EpHsqsG2&q=85&s=4e8f44f02059878dce36912a5dde0519" alt="" width="1076" height="626" data-path="images/dashboard/sso/sso-config-pending.png" />
</Frame>

## Disabling SSO

If you have SSO configured, the Team Owner can disable it from **Team
settings > Security**.

<Warning>
  Disabling SSO will require you to go through the whole setup process
  again.
</Warning>

## Inviting team members with SSO enabled

Once enabled, you’ll need to add members to your team through your identity
provider. Invites via the Dashboard will be disabled while SSO is enabled.

<Frame>
  <img src="https://mintcdn.com/smartcar-docs/klvdxjd2EpHsqsG2/images/dashboard/sso/invite-with-sso.png?fit=max&auto=format&n=klvdxjd2EpHsqsG2&q=85&s=cd408514ef3a7e8e46a7b2368e02901e" alt="" width="875" height="285" data-path="images/dashboard/sso/invite-with-sso.png" />
</Frame>

When a newly added member has signed in via SSO, they will have the Viewer role
by default. Other team members with the appropriate role can promote these
members as needed.

<Note>
  If a user creates a Dashboard account with their email prior to being added
  to your IdP, they will be added to their own Team initially. When they are
  added to your IdP they will be able to switch Teams in Dashboard.
</Note>

## A note on aliased emails

If members of your team have Dashboard accounts using email aliases prior to
enabling SSO e.g. [rover+thebest@dog.com](mailto:rover+thebest@dog.com), once SSO is enabled for your Team and
they’re added to your IdP, their login will be tied to their non-aliased email
address e.g. [rover@dog.com](mailto:rover@dog.com).

SSO is only available on the **Enterprise** plan, please reach out to your Account Manager for more details.