> ## Documentation Index
> Fetch the complete documentation index at: https://docs.upflow.io/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO authentication

> Understand how Upflow's SSO authentication flow works with your identity provider, from launching sign-in to verifying user identity by email address.

If you’re reading this article, chances are you know the benefits of using an Identity provider that will manage your information and verify your users’ identity, allowing them to log into related software solely using their e-mail address.

<img src="https://mintcdn.com/upflow-04dc27cd/Txp_W9u7QfyhwIgy/images/45487613792145.png?fit=max&auto=format&n=Txp_W9u7QfyhwIgy&q=85&s=0a09ebca8e23a531639aac1e9068d04e" alt="" width="504" data-path="images/45487613792145.png" />

## In short

To simplify it, once you have shared your email address and launched the SSO process, Upflow will knock at your IP’s door. The latter will make sure you are who you say you are and confirm it to Upflow who will let you in!

<img src="https://mintcdn.com/upflow-04dc27cd/ChOL1st0PHnWPSQG/images/45487598177297.png?fit=max&auto=format&n=ChOL1st0PHnWPSQG&q=85&s=92967cab246620316f3ae65093e14da6" alt="" width="320" data-path="images/45487598177297.png" />

## How to enable it?

First things first, you will need to introduce Upflow to your Identity Provider, by creating a new app in it. This grants Upflow (the new app) the right to read information associated to the credentials your users submit.

Refer to [Enabling Single Sign On (SSO) for your Upflow Users](/en-us/technical-documentation/sso/enabling-single-sign-on-sso-for-your-upflow-users) to find your SSO provider details.

Once you've followed the necessary steps in your SSO provider, open [secrets.upflow.io](https://secrets.upflow.io/) and add the required information to the Editor field:

1. Parameters of the newly registered app, pulled from your IP: `client_id`, `client_secret`, `issuer`.
2. Email domain name of your users (what comes after the “@” in their address, like “upflow\.io”).

Click on ***Send*** to encrypt the content you have just filled in, and share it with your interlocutor, who will pass it on to our Engineers. They will decrypt it before adding the information to your account.

## Log into Upflow with SSO

Once our team confirmed SSO is on for your domain, head to your Upflow login page.

Click the "Use Single Sign-On (SSO) instead" option:

<img src="https://mintcdn.com/upflow-04dc27cd/ChOL1st0PHnWPSQG/images/45487578630161.png?fit=max&auto=format&n=ChOL1st0PHnWPSQG&q=85&s=884bd7389d4022ef27e010bf0e2a4af8" alt="" width="320" data-path="images/45487578630161.png" />

Enter your user email address:

<img src="https://mintcdn.com/upflow-04dc27cd/Txp_W9u7QfyhwIgy/images/45487613792145.png?fit=max&auto=format&n=Txp_W9u7QfyhwIgy&q=85&s=0a09ebca8e23a531639aac1e9068d04e" alt="" width="504" data-path="images/45487613792145.png" />

You'll then be redirected to your SSO provider page, before accessing your Upflow account.

## I can't access Upflow

When SSO is enforced, if you experience any access issues, it can be due to different reasons.

First, check with your IT team if your SSO configuration was correct and isn't missing anything.

Then check if you're allowed to access Upflow in your SSO settings.

If all the above is ok, check with your team if anyone else experiences this issue and if teammates can log in on their end.

If the latter, then it could be a missing setting for your profile in your SSO provider's system, or related to your browser. Please try accessing Upflow in another browser or a private navigation tab/window.

If you've tried all the above, please contact us with as much detail as possible.

## Removing SSO

If you need the SSO login configuration to be removed, please contact our Support to proceed.

Once confirmed by our team that SSO is no longer active on your domain in Upflow, your team can log in using their email and password, or Google SSO if enabled before.

<img src="https://mintcdn.com/upflow-04dc27cd/ChOL1st0PHnWPSQG/images/45487609117585.png?fit=max&auto=format&n=ChOL1st0PHnWPSQG&q=85&s=cca6af7ba9d583905b4b73034f07e341" alt="" width="640" data-path="images/45487609117585.png" />
