> ## Documentation Index
> Fetch the complete documentation index at: https://help.cloudtalk.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Use SSO

> SSO setup for CloudTalk Phone or other CloudTalk applications can be adjusted from the Dashboard

<Note>
  **What is SSO?**

  Instead of the typical username and password combination, *SSO (Single Sign On)* uses a third-party identity provider to authenticate a user. This feature simplifies the management of user credentials and can be used strategically to strengthen the security of an enterprise.
</Note>

**User level:** Admin

***

<h2 id="h_91f0a63a1d">
  SSO Setup for Admins on Dashboard
</h2>

Settings for SSO must be adjusted by an admin through the Dashboard. From the left sidebar, click into **Account -> Settings**. By choosing the *Single Sign-on* header, you will be able to see available options for SSO in the form of toggle buttons.

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/52cb49742dd2-screenshot-2024-12-18-at-13-05-26.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=dc221bd159582ce507b0affc093f4e5b" alt="" width="2105" height="318" data-path="images/help-center/articles/5784952/52cb49742dd2-screenshot-2024-12-18-at-13-05-26.png" />
</Frame>

Admins can toggle *On/Off* to enable or to enforce:

* **Google SSO**

* **[Azure SSO](/en/articles/5912324-microsoft-azure-sso-setup)**

* **[Okta SSO](/en/articles/5996603-okta-sso-setup)**

* **Keycloak SSO**

* **[Onelogin SSO](/en/articles/6028218-onelogin-sso-setup)**

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/6cc5759a8ff8-screenshot-2024-12-18-at-13-06-10.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=a325122edf88e2da48bad02c7a23aae6" alt="" width="2127" height="1098" data-path="images/help-center/articles/5784952/6cc5759a8ff8-screenshot-2024-12-18-at-13-06-10.png" />
</Frame>

Logging in with an identity provider not listed may be possible—[contact a support agent](http://support@cloudtalk.io) for assistance. Toggling *on* an option requires users to have an account with the third-party provider.

Enforcing an option will necessitate agents using CloudTalk Phone or other CloudTalk services to use SSO as their required sign-in option, whereas enabling SSO simply offers the choice to use that sign-in option.

<Warning>
  ⚠️ Finish setting up and testing your SSO provider before turning on Enforce SSO. If Enforce SSO is on and no working SSO provider is connected, nobody on your account can log in, with SSO or a password, and you'll need to contact [Support](https://support.cloudtalk.io/hc/en-us/requests/new?ticket_form_id=26305535257884) to restore access.
</Warning>

<h3 id="h_10f5c4cdb1">
  Google SSO
</h3>

Google is the only third party which does not require additional setup information.

<h3 id="h_3ce5d5d340">
  Okta, OneLogin, Azure, Keycloak SSO
</h3>

Admin will be asked to fill in the following:

* **Client ID**

* **Client Secret**

* **Discovery URL** (sometimes called "Resource/Issuer URL")

* **Method** (GET or POST)

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/6d1eff8dce77-screenshot-2024-12-18-at-13-09-17.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=b98521c70fe95229dc38ff2665c6f1d3" alt="" width="2048" height="586" data-path="images/help-center/articles/5784952/6d1eff8dce77-screenshot-2024-12-18-at-13-09-17.png" />
</Frame>

All of above must be found in through the respective identity provider's interface. Click to view our setup guides for [Azure](/en/articles/5912324-microsoft-azure-sso-setup), [Okta](/en/articles/5996603-okta-sso-setup), or [OneLogin](/en/articles/6028218-onelogin-sso-setup).\
\
**Discovery URL**

The Discovery URL can be found in the documentation or user profiles of the identity provider. It is sometimes referred to by another name such as "Resource" or "Issuer" URL and should look like an https link, as in the example below.

* For Microsoft Azure: [`https://login.microsoftonline.com/{tenant}/v2.0`](https://login.microsoftonline.com/%7Btenant%7D/v2.0)

* Where `{tenant}` must be replaced with the real tenant ID

<h3 id="h_45e570412c">
  Redirect URI
</h3>

For Okta, OneLogin, Azure, Keycloak, and other third-parties, customers will also need to set up a redirect URI within the configuration interface of the SSO provider. Setup varies per provider.

```
Provider interface redirect URIs (add both): 

https://authsso.cloudtalk.io/oauth2/idpresponse

https://cloudtalk-prod.auth.eu-central-1.amazoncognito.com/oauth2/idpresponse
```

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/55bbbacc73b9-other-url-1.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=231e2761d1dd0890d86dd1c3905e0043" alt="" width="400" data-path="images/help-center/articles/5784952/55bbbacc73b9-other-url-1.png" />
</Frame>

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/62a8a4bd81bd-other-url-2.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=47dba7f1bd5168ac2a569a18635e3ca3" alt="" width="400" data-path="images/help-center/articles/5784952/62a8a4bd81bd-other-url-2.png" />
</Frame>

***

<h2 id="h_ab86b851af">
  Login Screen for All
</h2>

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/336aad0ec7e6-screenshot-2024-12-18-at-13-10-59.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=81f07e1bf5a7739c73e15fb0162aee3c" alt="" width="350" data-path="images/help-center/articles/5784952/336aad0ec7e6-screenshot-2024-12-18-at-13-10-59.png" />
</Frame>

The settings chosen through the Dashboard will affect what users see on all CloudTalk login screens. When enabled, a button labeled **`Continue with SSO`** should be viewable on login screens*.*

Selecting this option, users will be prompted to enter their CloudTalk email.

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/ee515f6ff9d5-screenshot-2024-12-18-at-13-12-36.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=f04905abbae6958f111438b825162032" alt="" width="400" data-path="images/help-center/articles/5784952/ee515f6ff9d5-screenshot-2024-12-18-at-13-12-36.png" />
</Frame>

Choose which available SSO you would like to login with.

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/6254e20a67ff-image.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=ce81201159a3da1e876902ef2c7438b7" alt="" width="400" data-path="images/help-center/articles/5784952/6254e20a67ff-image.png" />
</Frame>

Depending on the third party provider, you may be redirected to another login screen, where you can enter your credentials for the third-party provider. If the login is successful, we will cross reference our user database against the third-party credentials, logging in the user when a correct match is found.

<Frame>
  <img src="https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5784952/3109d358b6ec-okta-login-example.png?fit=max&auto=format&n=Cdyt2I6w7OABieBC&q=85&s=86658a030f1c606840c915987edbdbb9" alt="" width="400" data-path="images/help-center/articles/5784952/3109d358b6ec-okta-login-example.png" />
</Frame>

As an admin, make sure that if you choose to enforce SSO from the **Dashboard** settings, all employees have access to the required sign-in.

***

*Need help or have a question?* Just reach out through our [Support portal](https://support.cloudtalk.io/hc/en-us/requests/new?ticket_form_id=26305535257884) — we’re here for you.


## Related topics

- [Account Settings Guide](/en/articles/10550593-account-settings-guide.md)
- [Can't log in to CloudTalk](/en/articles/16014347-can-t-log-in-to-cloudtalk.md)
- [OneLogin SSO Setup](/en/articles/6028218-onelogin-sso-setup.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.