# Single Sign On

Whaly supports Single Sign On. This means that you can plug your existing Identity Provider such as Google Workspace, Microsoft Azure Directory, Okta, custom SAML ... into Whaly so that your Team Member have to login through your company identity system before accessing Whaly.

This offers multiple advantages:

* When your IT team disable a User in your company directory, the User no longer can access Whaly
* Your IT team can decide form your Directory which User should have access to Whaly or not
* Your Team Members passwords are never known / saved into Whaly systems
* Whaly will create users "on the fly" when they first login. This means that you don't have to create any Whaly access for your new team members or invite your whole company before they can get access

Overall, enabling Single Sign On is:

* More secure
* Give you more control
* Lower the user management cost for your IT Team
* Offer a better login experience to your Team Members
* In many case, this is required if your company is security certified (SOC2 / ISO27001)

In order to configure your SSO, you simply have to go to your [Team Management](/team/what-is-a-team.md#managing-the-team) page and click on "Configure my SSO". You'll be redirected to a portal where you can self configure your SSO Provider.

{% hint style="info" %}
If your current plan doesn't include SSO support, a link to contact Whaly Sales team will be displayed so that you can discuss about your needs.
{% endhint %}

### User provisioning

Whenever a new User from your company directory is logging for the first time into Whaly, a new User will be created on the fly and a Viewer (free) access will be created on the Organizations of your team.

The Administrators of your [Organizations](/organisation/what-is-an-organisation.md) will then be able to assign the proper [access](/organisation/manage-access-control.md) and [licenses](/organisation/understanding-licences.md) to them.

## Supported Identity Providers

Whaly currently supports the following Identity Providers:

<figure><img src="/files/ptOU81kdEnTvchjAmvkA" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Thanks to our generic SAML support, we can also connect to Identity providers that are not included in the list.

Contact your support if you need assistance!
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.whaly.io/team/single-sign-on.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.