| 1 | # Enterprise SSO Authentication |
| 2 | |
| 3 | Enterprise Single Sign-On (SSO) integration enables you to manage Netdata Cloud access through your existing identity management solution. This simplifies user authentication and improves security through centralized access control. |
| 4 | |
| 5 | :::important |
| 6 | |
| 7 | Enterprise SSO handles authentication only. You must configure user and role management separately within Netdata Cloud. |
| 8 | |
| 9 | ::: |
| 10 | |
| 11 | ## Prerequisites |
| 12 | |
| 13 | | Requirement | Details | |
| 14 | |--------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------| |
| 15 | | **SSO Provider** | Must be [supported by Netdata](https://learn.netdata.cloud/docs/netdata-cloud/authentication-&-authorization/cloud-authentication-&-authorization-integrations) | |
| 16 | | **Account Status** | Active Netdata Cloud account | |
| 17 | | **Subscription** | Paid plan | |
| 18 | | **Access Level** | Space Administrator permissions | |
| 19 | |
| 20 | ## Setup |
| 21 | |
| 22 | ### Netdata Cloud Configuration |
| 23 | |
| 24 | To configure SSO in your Netdata Cloud space: |
| 25 | |
| 26 | 1. Navigate to **Space Settings** (⚙️) on the left sidebar below the spaces list |
| 27 | 2. Select User Management → Authentication & Authorization |
| 28 | 3. Locate your desired SSO integration |
| 29 | 4. Click "Configure" and fill in the required integration attributes |
| 30 | |
| 31 | ### Domain Verification |
| 32 | |
| 33 | Domain verification is required to establish secure SSO connectivity: |
| 34 | |
| 35 | 1. **Access the DNS TXT record:** |
| 36 | - Go to Space Settings → User Management → Authentication & Authorization |
| 37 | - Click "DNS TXT record" button to reveal verification code |
| 38 | |
| 39 | 2. **Add DNS Record:** |
| 40 | - Log into your domain provider's DNS management |
| 41 | - Create a new TXT record with these specifications: |
| 42 | |
| 43 | | Field | Value | |
| 44 | |------------------------------|----------------------------------------------| |
| 45 | | **Value/Answer/Description** | `"netdata-verification=[VERIFICATION CODE]"` | |
| 46 | | **Name/Host/Alias** | Leave blank or use @ for subdomain | |
| 47 | | **TTL (Time to Live)** | 86400 (or use provider default) | |
| 48 | |
| 49 | ### SSO Provider Configuration |
| 50 | |
| 51 | Consult your provider's documentation for detailed instructions. |
| 52 | |
| 53 | ## How to Authenticate |
| 54 | |
| 55 | Click on the link `Sign-in with an Enterprise Single Sign-On (SSO)` and follow the instructions. If you're not authenticated on the Enterprise SSO tool, you'll be prompted to authenticate there first before being allowed to proceed to Netdata Cloud. |