> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goguava.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Single sign-on (SSO)

> Require your team to sign in to Guava through your identity provider

Guava supports single sign-on through SAML 2.0. Once SSO is enabled for your email domains, everyone with an email address on those domains signs in to the Guava dashboard through your identity provider (IdP). Email codes and Google sign-in are disabled for those addresses.

To sign in, users enter their work email on the [Guava sign-in page](https://app.goguava.ai/dashboard/sign-in) and are redirected to your IdP. Users can also sign in by launching Guava from your IdP's dashboard.

## Okta

### Create the app integration

In the Okta Admin Console, go to **Applications** > **Applications** and click **Create App Integration**. Select **SAML 2.0** and click **Next**.

### Configure general settings

Enter `Guava` as the **App name**. Click **Next**.

### Configure SAML

Enter the following settings, leaving everything else as its default:

| Setting | Value |
| - | - |
| Single sign-on URL | `https://app.goguava.ai/saml/sp/acs` |
| Audience URI (SP Entity ID) | `https://app.goguava.ai/saml/sp/metadata` |
| Default RelayState | Leave blank |
| Name ID format | `EmailAddress` |
| Application username | `Email` |
| Update application username on | `Create and update` |

Attribute statements are not required. Click **Next**, then click **Finish**.

### Assign users

On the app's **Assignments** tab, click **Assign** and assign the people or groups who should have access to Guava.

### Send us your metadata URL

On the app's **Sign On** tab, find **Metadata URL** under **SAML 2.0**. Send your metadata URL to your Guava account executive, along with the email domains to enable SSO for.

## Google Workspace

### Create the SAML app

In the Google Admin Console, go to **Apps** > **Web and mobile apps** and click **Add app** > **Add custom SAML app**. Enter `Guava` as the **App name** and click **Continue**.

### Download IdP metadata

On the **Google Identity Provider details** page, click **Download metadata** to save the IdP metadata XML file. Click **Continue**.

### Configure service provider details

Enter the following settings, leaving everything else as its default:

| Setting | Value |
| - | - |
| ACS URL | `https://app.goguava.ai/saml/sp/acs` |
| Entity ID | `https://app.goguava.ai/saml/sp/metadata` |
| Start URL | Leave blank |
| Signed response | Unchecked |
| Name ID format | `EMAIL` |
| Name ID | `Basic Information > Primary email` |

Click **Continue**. Attribute mappings are not required. Click **Finish**.

### Enable user access

Open the Guava app in the Google Admin Console and click **User access**. Enable the app for the organizational units or groups who should have access to Guava. Click **Save**.

### Send us your metadata XML

Send the IdP metadata XML file you downloaded earlier to your Guava account executive, along with the email domains to enable SSO for.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.