> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qawolf.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Single Sign-On (SSO)

> Set up SSO via SAML 2.0 and OpenID Connect

# Requirements

The administrator configuring SSO must be able to:

* Verify your organization domain, such as by adding a TXT record.
* Create applications in the identity provider.
* Configure SAML or OIDC authentication settings.
* Assign users or groups to applications.

# Set up

### Verify your email domain

<Steps>
  <Step title="Log in as SSO Admin">
    SSO Admin permissions are granted by Membership Managers. 
  </Step>

  <Step title="Verify your email domain">
    Add domains under **Workspace Settings.**
  </Step>

  <Step title="Create an application in your identity provider.">
    Configuration values are listed in the **SSO settings page**.
  </Step>

  <Step title="Enter identity provider details in QA Wolf" />

  <Step title="Assign users or groups to the QA Wolf application in your identity provider.">
    /
  </Step>
</Steps>

# Troubleshooting

## I do not see the SSO setup page

Confirm that:

* You have been granted the **SSO Admin** role by a user with the **Membership Manager** role.
* You signed out of QA Wolf and signed back in after your role was updated.

## A user cannot sign in

Check that:

* The user is assigned to the QA Wolf application.
* The user is signing in with the correct email address.
* The SSO configuration has been saved.

## Authentication fails

Verify that the following values match between QA Wolf and your identity provider:

* ACS URL
* Audience / entity ID
* Issuer
* Login URL
* Certificate

## Users are not redirected back to QA Wolf

Ensure the redirect or callback URL configured in your identity provider matches the value shown in the QA Wolf SSO settings page.