Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 14 additions & 10 deletions fern/products/dashboard/pages/sso.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -3,17 +3,16 @@ title: Set up Single Sign-On (SSO)
description: Let teammates sign in to Fern with your IdP (SAML or OIDC)
---

<Markdown src="/snippets/enterprise-plan.mdx" />
Set up Single Sign-On (SSO) to sign in to Fern using your existing identity provider.

Set up Single Sign-On (SSO) to sign in to Fern using the identity provider you already use. SSO setup requires coordination with Fern: you'll need configuration values from Fern (like callback URLs and entity IDs) to set up your IdP, and you'll share your IdP metadata back with Fern to complete the connection.

Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta, Google Workspace, or Microsoft Entra.
SSO setup requires working with Fern to exchange configuration values (like callback URLs and entity IDs). To get started, select your identity provider below (Okta, Google Workspace, or Microsoft Entra), then choose SAML or OIDC.

<Note title="Using another provider?">
If you use another IdP, Fern will help you configure it. Reach out via Slack or [email protected] to get started.
If you use another IdP, Fern will help you configure it. Reach out via Slack or [email protected] to get started.
</Note >

## Okta
<AccordionGroup>
<Accordion title="Okta">

<Tabs>
<Tab title="SAML">
Expand Down Expand Up @@ -77,7 +76,8 @@ Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta,
</Tab>
</Tabs>

## Google Workspace
</Accordion>
<Accordion title="Google Workspace">

<Tabs>
<Tab title="SAML">
Expand Down Expand Up @@ -114,7 +114,8 @@ Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta,
</Tab>
</Tabs>

## Microsoft Entra
</Accordion>
<Accordion title="Microsoft Entra">

<Tabs>
<Tab title="SAML">
Expand Down Expand Up @@ -149,8 +150,8 @@ Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta,
</Step>

<Step title="Disable IdP-initiated login">
To prevent IdP-initiated login flows (which carry security risks), do not distribute the User access URL.
To prevent IdP-initiated login flows (which carry security risks), do not distribute the User access URL.

Optionally, create a Conditional Access policy to block sign-ins that don't originate from your service provider.
</Step>

Expand All @@ -160,3 +161,6 @@ Choose SAML or OIDC depending on your IdP, then follow the steps below for Okta,
</Steps>
</Tab>
</Tabs>

</Accordion>
</AccordionGroup>