# Single sign-on

> Let members sign in to Runbear through your identity provider.

Source: https://docs.runbear.io/administration/sso

Last updated: 2026-10-07

Single sign-on connects Runbear to your identity provider so members sign in with
their existing corporate account instead of a separate Runbear credential.

> **Note**
>
> SSO is part of the enterprise entitlement and is configured by an Admin. If
> **Settings → Single sign-on** does not appear, your plan does not include it yet.

## Setting it up

1. Open **Settings** and select **Single sign-on**.
2. Select **Generate setup link**. Runbear produces a link that opens the guided
   configuration for your identity provider (IdP).
3. Copy the link and complete the configuration there with your provider's
   metadata, or send it to whoever administers your IdP. They can complete the
   connection without a Runbear account.
4. Return to **Single sign-on** and check the status badge on **SAML connection**.

The link expires in 24 hours, and anyone who opens it can configure your
organization's identity provider, so share it only with your IdP administrator.
If it is lost or expires, generate a new one from the same page; once a connection
exists, the button reads **Generate a new setup link**.

## Connection status

| Badge             | Meaning                                             |
| ----------------- | --------------------------------------------------- |
| **Not connected** | No identity provider is configured yet              |
| **Test mode**     | The connection is configured but still in test mode |
| **Connected**     | Members can sign in with SSO from the login page    |

## After it is enabled

Members sign in through your provider. Deprovisioning a user in the provider stops
their access to Runbear.

## Related

- [Members and roles](/administration/members-and-roles.md)
- [Audit log](/administration/audit-log.md)