> For the complete documentation index, see [llms.txt](https://help.sipgate.de/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.sipgate.de/cloud-telefonanlage/en/account-management/login/wie-richte-ich-einen-sso-login-fuer-mein-unternehmen-ein.md). # How do I set up SSO login for my company? Single sign-on (SSO) enables admins to make centralized management of user accounts more efficient. Users can access various services and applications by signing in once. This simplifies password management and access control, resulting in increased security and efficiency in centralized account management. In this article you will learn how to set up the SSO login function for your account. {% hint style="info" %} Here you will find detailed step-by-step instructions on how to configure SAML-SSO at [Google](https://help.sipgate.de/hc/de/articles/13533077615517-Wie-richte-ich-SAML-SSO-mit-Google-ein-), [Microsoft](https://help.sipgate.de/hc/de/articles/13692433672349-Wie-richte-ich-SAML-SSO-mit-Microsoft-ein-) and [Okta](https://help.sipgate.de/hc/de/articles/13695565217309) configure. {% endhint %} #### Verify domain As an admin, you can set up SSO for your company. To do this, log in to your sipgate account and proceed as follows: **Account --> Single Sign-on (SSO)**. ![](/files/d4548e0bb292f68973295b7e93aa9ae6044c7d60) In the first step, you need to verify your domain with sipgate. Go to **Add domain**. ![](/files/fc0e903312adc618aa13cc150285d3ac984221d3) Enter the name of your domain and confirm this step with **Start verification**. ![](/files/bd3ea36ed9f0114c4291873bd18eca42bcc19519) For verification, you will receive a key in the form of a **TXT record**This should be entered with your DNS provider. You will be informed by email about the status of your domain verification. ![sipgate-Hilfecenter-SSO4.png](/files/ee9fc7d691f9e624f2ae8a94cbd2f7df5143c1bf) {% hint style="info" %} If you want to verify multiple domains, you can do that right at the beginning. {% endhint %} Domain verification can **take up to 24 hours** to complete. You can track the status of the verification in your account. In addition, you will receive an email notification as soon as the status changes. #### Set up SSO configuration Once your domain has been verified, you can continue with the SSO configuration. The data configured by sipgate (**ACS URL** and **Entity ID**) can be found in the Service Provider data section. Enter this information in your Identity Provider when prompted to do so. In the next step, click on **Add data**, to set up SSO configuration. ![sipgate-Hilfecenter-SSO7.2.png](/files/c885366d5f4de76c207259e1ab3ccf62124dc219) You can either **set it up manually** or use the **XML file upload**-function. ![sipgate-Hilfecenter-SSO7.1.png](/files/3d62288ce25bf27c36868730207d299217654af0) {% tabs %} {% tab title="set it up manually" %} For manual configuration, please enter your **SSO URL**, your **Entity ID** as well as your **certificate** and then click on **Save**. You can find this information with your Identity Provider if you want to set up an SSO interface with a service. ![sipgate-Hilfecenter-SSO8.png](/files/a717700050d75ff5289a52977bf6c614cd20fe0d) {% endtab %} {% tab title="XML file upload" %} You also have the option of uploading an XML file to have the information filled in automatically. You can configure this file in your Identity Provider. ![sipgate-Hilfecenter-SSO2.1.png](/files/ca1b1d0d90b6e8f5c45a9818790dbc5b88be143c) {% endtab %} {% endtabs %} Once you have completed these steps successfully, the interface between sipgate and your Identity Provider should be set up. You can then activate the SSO login via the toggle. ![sipgate-Hilfecenter-SSO7.3.png](/files/d4f941cabe41da5ee9f2405fffc24c2016176108) #### Important notes on SSO login ### **What happens if my domain is not verified?** If your domain cannot be verified, the domain must be deleted and entered again for verification. If your domain still cannot be verified, please contact our customer support. ### **What happens if I delete all domains in the SSO section?** If all existing domains have been deleted, domain setup must be started from scratch. Please note, however, that the SSO configuration remains saved and can be used again after the domain has been re-verified. ### **What happens if I deactivate the SSO login function?** If you deactivate the SSO login method, your web users will log in via other methods, such as login credentials or social login. This change only takes effect when web users make a new login attempt. ### **What happens if the certificate was not imported correctly?** Then, in the sipgate Google login, you will see an error message **400 SAML Error: malformed\_certificate**\ **Solution**: Reinsert the certificate and pay attention to the formatting --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://help.sipgate.de/cloud-telefonanlage/en/account-management/login/wie-richte-ich-einen-sso-login-fuer-mein-unternehmen-ein.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.