> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cartesia.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up SSO

> Configure Single Sign-On (SSO) for your Enterprise organization directly from the Cartesia Playground.

Organizations on the Enterprise plan can set up Single Sign-On (SSO) so your team signs in to Cartesia through your own identity provider. SSO is self-serve: an organization admin configures, tests, and activates it directly from the Playground, with no back-and-forth with Cartesia. Both **SAML** and **OIDC** are supported, including Okta, Microsoft Entra ID, Google Workspace, and custom providers. SSO is powered by our identity provider, [Clerk](https://clerk.com).

<Note>
  SSO is available on the **Enterprise** plan, and only an **organization admin** can configure it.
</Note>

## Configure SSO

<Steps>
  <Step title="Open your SSO settings">
    In the Playground, go to your organization's [Privacy settings](https://play.cartesia.ai/settings/organization?org=privacy). Under **Single Sign-On (SSO)**, select **Configure SSO**, then open the **Security** tab in the dialog that appears.

    <Frame>
      <img src="https://mintcdn.com/cartesia-2650f86a/ZeYqWmMRb25LD28C/assets/images/sso_security_tab.png?fit=max&auto=format&n=ZeYqWmMRb25LD28C&q=85&s=97747d0d0f48f34b8723adb6e892c1e8" alt="Security tab with SSO unconfigured" width="1370" height="1097" data-path="assets/images/sso_security_tab.png" />
    </Frame>
  </Step>

  <Step title="Add and verify your domains">
    Add each email domain your team uses to sign in, then verify ownership of each by adding the **DNS `TXT` record** shown to your domain's DNS settings. Verification can take a few minutes to propagate.

    <Frame>
      <img src="https://mintcdn.com/cartesia-2650f86a/ZeYqWmMRb25LD28C/assets/images/sso_add_domains.png?fit=max&auto=format&n=ZeYqWmMRb25LD28C&q=85&s=eca10cb384133170facdad7f58ffb185" alt="Add SSO domains step" width="1361" height="1090" data-path="assets/images/sso_add_domains.png" />
    </Frame>
  </Step>

  <Step title="Connect your identity provider">
    Select your identity provider and follow the guided steps to connect it over **SAML** or **OIDC**. Cartesia shows the service provider details to enter in your provider, and collects your provider's configuration in return.

    For provider-specific setup, see Clerk's enterprise connection guides for [Okta](https://clerk.com/docs/guides/configure/auth-strategies/enterprise-connections/saml/okta), [Microsoft Entra ID](https://clerk.com/docs/guides/configure/auth-strategies/enterprise-connections/saml/azure), and [other providers](https://clerk.com/docs/guides/configure/auth-strategies/enterprise-connections/overview).

    <Frame>
      <img src="https://mintcdn.com/cartesia-2650f86a/ZeYqWmMRb25LD28C/assets/images/sso_select_provider.png?fit=max&auto=format&n=ZeYqWmMRb25LD28C&q=85&s=90e17b1bfbb72af5ccf0e0e272937621" alt="Select your identity provider step" width="1030" height="824" data-path="assets/images/sso_select_provider.png" />
    </Frame>
  </Step>

  <Step title="Test the connection">
    Use the **Test** step to run a test sign-in and confirm the connection works end to end before you roll it out to your team.

    <Frame>
      <img src="https://mintcdn.com/cartesia-2650f86a/ZeYqWmMRb25LD28C/assets/images/sso_test_connection.png?fit=max&auto=format&n=ZeYqWmMRb25LD28C&q=85&s=9afcc4ba3f0097dbab485033a2675be5" alt="Test your SSO connection step" width="1031" height="825" data-path="assets/images/sso_test_connection.png" />
    </Frame>
  </Step>

  <Step title="Activate SSO">
    Select **Activate** to turn on the connection. Members with an email address on a verified domain then sign in to Cartesia through your identity provider.

    <Frame>
      <img src="https://mintcdn.com/cartesia-2650f86a/ZeYqWmMRb25LD28C/assets/images/sso_activate.png?fit=max&auto=format&n=ZeYqWmMRb25LD28C&q=85&s=5416353b11175cb0352ab1edc4e202cf" alt="Activate SSO step" width="1035" height="828" data-path="assets/images/sso_activate.png" />
    </Frame>
  </Step>
</Steps>

<Note>
  Run into any trouble? Reach out to [support@cartesia.ai](mailto:support@cartesia.ai).
</Note>
