> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO & Authentication

> Configure enterprise Single Sign-On (SAML 2.0 / OIDC), Multi-Factor Authentication, and session policies.

Snapsec supports seamless integration with leading enterprise Identity Providers (IdPs).

***

## Supported Identity Providers

* **Okta** (SAML 2.0 & OIDC)
* **Microsoft Entra ID / Azure AD** (SAML 2.0 & OIDC)
* **Google Workspace** (SAML 2.0 & OIDC)
* **Ping Identity / PingFederate**
* **Auth0 / CyberArk**

***

## SAML 2.0 Configuration

1. In your IdP, create a new SAML 2.0 Application.
2. Enter the Snapsec Service Provider (SP) metadata:
   * **Single Sign-On URL (ACS)**: `https://<your-domain>/auth/saml/callback`
   * **Entity ID (Audience URI)**: `https://<your-domain>/auth/saml/metadata`
   * **Name ID Format**: `EmailAddress`
3. Map the required SAML attributes:
   * `email` -> User Email
   * `firstName` -> User First Name
   * `lastName` -> User Last Name
   * `groups` -> IdP Group Membership (optional)
4. Upload your Identity Provider Metadata XML in **Platform > Administration > SSO & Authentication**.
5. Enable **Enforce SSO** to require all non-administrator users to authenticate via your IdP.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.