> For the complete documentation index, see [llms.txt](https://docs.telm.ai/telmai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.telm.ai/telmai/authentication-and-access-control/sso-configuration.md).

# SSO Configuration

This document provides step-by-step instructions on how to configure Single Sign-On (SSO) on Telmai. Follow the steps below to set up SSO seamlessly.

### Step 1: Navigate to SSO Settings

1. Log in to the Telmai.
2. Go to **Administration**.

<figure><img src="https://604868671-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MkO3-a8YVu1iq1jP__S%2Fuploads%2F3MaWd2FqWTxcE72snaMD%2Fimage.png?alt=media&amp;token=c84f6d05-3b91-43a6-b90a-8e44b8efbac0" alt="" width="119"><figcaption></figcaption></figure>

3. Click on **Single Sign-On (SSO) Settings**.

<figure><img src="https://604868671-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MkO3-a8YVu1iq1jP__S%2Fuploads%2F8GEvHItfBTV0fOCUWz1d%2FScreenshot%202025-02-11%20at%204.03.42%E2%80%AFPM.png?alt=media&amp;token=51026fd3-9bf1-48d2-9a93-9b5c93f6345e" alt="" width="563"><figcaption></figcaption></figure>

### Step 2: Configure SSO Details

1. Enter a unique **Login URL Suffix**
   * This will be used to list IDPs available for the user
2. Provide client credentials:
   * **Client ID**: Enter the ID provided by your IdP.
   * **Client Secret**: Enter the secret key provided by your IdP.
3. Provide SSO endpoints or click **Provide Issuer URL**:
   * You can enter the below details manually:
     1. **Issuer**: Enter the Issuer URL from your IdP.
     2. **Authorization**: Enter the Authorization endpoint.
     3. **Token**: Enter the Token endpoint.
     4. **JWKS**: Enter the JWKS (JSON Web Key Set) URL.
     5. **User Info**: Enter the User Info endpoint.
   * **OR** Click on **Provide Issuer URL** to open a modal dialog.

     1. Enter the **Issuer URL** from your IdP and click **Retrieve Endpoints**.

     <figure><img src="https://604868671-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MkO3-a8YVu1iq1jP__S%2Fuploads%2Fl4fGdjs6HGh86TUGpEXd%2FScreenshot%202025-02-11%20at%204.04.46%E2%80%AFPM.png?alt=media&amp;token=8e5f645c-955f-4a94-b14a-3c6b66205325" alt="" width="563"><figcaption></figcaption></figure>
4. Click **Save** to store the configuration.

<figure><img src="https://604868671-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MkO3-a8YVu1iq1jP__S%2Fuploads%2FrnVfmUPlOBrtde0Eyn3w%2FScreenshot%202025-02-11%20at%204.04.53%E2%80%AFPM.png?alt=media&amp;token=636bd309-6786-4972-936d-4c054b25b652" alt="" width="563"><figcaption></figcaption></figure>

5. You can use the toggle button to Enable/Disable the setting. You can also **update** or **delete** the setting at anytime.

<figure><img src="https://604868671-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MkO3-a8YVu1iq1jP__S%2Fuploads%2FxESdBpmLkQh1e3PnYw1N%2FScreenshot%202025-02-11%20at%204.05.05%E2%80%AFPM.png?alt=media&amp;token=323e84b2-abf3-48b5-accb-f1e07eac8682" alt="" width="563"><figcaption></figcaption></figure>

***

### Step 3: SSO Testing and Verification

1. Navigate to the login page
   * Example: <https://dev.telm.ai/login>
2. Click on **Sign in with IDP.**

<figure><img src="https://604868671-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MkO3-a8YVu1iq1jP__S%2Fuploads%2FKdleVP0tVeFUa5Xcq0LW%2FScreenshot%202025-02-11%20at%204.05.38%E2%80%AFPM.png?alt=media&amp;token=8b564c23-d281-4dc0-adce-bd0f381fe7cd" alt="" width="375"><figcaption></figcaption></figure>

3. You will be redirected to Issuer URL. Enter the required details and click Sign In.

<figure><img src="https://604868671-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MkO3-a8YVu1iq1jP__S%2Fuploads%2F5xvu4ZnSbzTElt9qRIXM%2FScreenshot%202025-02-11%20at%204.06.14%E2%80%AFPM.png?alt=media&amp;token=326cef58-8cdb-4866-a9c1-19831d38e3f5" alt="" width="563"><figcaption></figcaption></figure>

If authentication is successful, you should be redirected to the Telmai dashboard.