> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tryprofound.com/llms.txt
> Use this file to discover all available pages before exploring further.

> Enterprise Single Sign-On (SSO) allows users to seamlessly sign in using their corporate identity provider (IdP) credentials (e.g., Azure AD, Okta, or Google Workspace) and have their user data synchronized with Profound. Profound supports multiple protocols for implementing enterprise SSO, including SAML and OIDC.

# Enterprise Single Sign-On (SSO)

<Note>
  SSO is available for customers on the Enterprise plan. To get started, reach out to your engagement manager to request a configuration link.
</Note>

## Getting Started

Profound provides a self-serve configuration portal that allows you to set up SSO for your organization. Your engagement manager will provide you with a unique configuration link where you can connect your Identity Provider (IdP) directly.

## Supported Protocols

### SAML

Profound supports Enterprise SSO over the SAML protocol. The following IdPs have been validated as compatible: Microsoft Azure AD, Google Workspace, and Okta Workforce. However, Profound is designed to integrate with any other IdP that supports the standard SAML protocol.

#### Allow subdomains

Authenticating via SAML SSO requires the user's email address domain to match the exact domain the SAML connection has been configured with. By default, subdomains are not supported. For example, a user with the email address`john-smith@dev.tryprofound.com`wouldn't be able to use a SAML connection with the `tryprofound.com` domain to authenticate.

<Note>
  To enable the **subdomains** option, your SAML connection domain must be an [eTLD+1](https://developer.mozilla.org/en-US/docs/Glossary/eTLD).
</Note>

### OIDC

Profound supports enterprise SSO by integrating with any OIDC-compliant provider.

## Next Steps

[Configure SAML SSO](/enterprise-connections/saml) - Step-by-step guide for setting up SAML-based authentication
[Configure OIDC SSO](/enterprise-connections/oidc) - Instructions for implementing OIDC-based authentication

## Support

If you need assistance during setup, please contact [support@tryprofound.com](mailto:support@tryprofound.com).