## Authentication

Single Sign-On (SSO) enables users to log in once with a single set of credentials to access all corporate apps, websites, and data they have permissions for.

DataLexing integrates with any third-party SSO provider using Security Assertion Markup Language (SAML) to control who can log in without requiring separate sign-ups for DataLexing.

The Single Sign-On feature is part of the DataLexing Enterprise offering. Instance-wide features are only available on the self-hosted Enterprise plan.

Only Instance admins have access to the DataLexing Admin panel, giving them admin access to the entire self-hosted instance.

DataLexing users can use Single Sign-On (SSO) to maintain their user identities in a central location, allowing them to access many services using the same user base.

## Prerequisites

To configure an authentication provider for single sign-on, users will generally need to:

* Obtain the Client ID and Secret from their chosen provider and use them to create a new authentication provider in DataLexing.

* Know the provider’s base URL for GitLab or OpenID Connect providers.

* Set/allow the DataLexing Callback URL in the provider so users can be safely redirected back to DataLexing upon login.

## View a List of Authentication Providers

To view the providers registered in your instance:

1. Visit your DataLexing server and log in as an instance-wide admin.

2. In the left menu, select "Admin."

3. Click the "Authentication" page. The Authentication providers pane will open and display a list of the providers in your server.

Set up Google Provider\
Set up Microsoft Azure Provider

## SAML SSO Providers

Security Assertion Markup Language (SAML) is a security standard for managing authentication and access. Using SAML SSO, users can log in to their DataLexing organization using the organization’s identity provider.