# SSO Login Services
Once Devtron is installed, it has a built-in `admin` user with super-admin privileges having unrestricted access to all Devtron resources. We recommended to use this user only for initial and global configurations and then switch to local users or configure SSO-login.
Only users with [super-admin](/operator-guide/authorization/user-permissions.md#role-based-access-levels) privileges can configure the SSO. Devtron uses [Dex](https://dexidp.io/docs/connectors/google/) for authenticating a user against the identity provider.
Below are the SSO providers which are available in Devtron. Select one of the SSO providers (e.g., GitHub) to configure SSO:
* [Google](/operator-guide/authorization/sso-login-services/google.md)
* [GitHub](/operator-guide/authorization/sso-login-services/github.md)
* [GitLab](/operator-guide/authorization/sso-login-services/gitlab.md)
* [Microsoft](/operator-guide/authorization/sso-login-services/microsoft.md)
* [LDAP](/operator-guide/authorization/sso-login-services/ldap.md)
* [OpenID Connect](/operator-guide/authorization/sso-login-services/oidc.md)
* [OpenShift](/operator-guide/authorization/sso-login-services/openshift.md)
Dex implements connectors that target specific `identity providers` for each connector configuration. You must have a created account for the corresponding identity provider and registered an app for client key and secret.
Refer the following documents for more detail.
*
*
***
## Create SSO Configuration
Make sure that you have a [super admin access](/operator-guide/authorization/user-permissions.md#assign-super-admin-permission).
* From the left sidebar, go to **Global Configurations** → **Authorization** → **SSO Login Services**
* Click any `SSO Provider` of your choice.
* In the `URL` field, enter the valid Devtron application `URL` where it is hosted.
* For providing `redirectURI` or `callbackURI` registered with the SSO provider, you can either select `Configuration` or `Sample Script`.
* Provide the `client ID` and `client Secret` of your SSO provider (e.g. If you select `Google` as SSO provider, then you must enter `$GOOGLE_CLIENT_ID` and `$GOOGLE_CLIENT_SECRET` in the `client ID` and `client Secret` respectively.)
* Select `Save` to create and activate SSO Login Service.
**Note**:
* Only single SSO login configuration can be active at one time. Whenever you create or update any SSO configuration, it will be activated and used by Devtron and previous configurations will be deleted.
* Except for the domain substring, URL and redirectURI remains same.
## Update SSO Configuration
You can change SSO configuration anytime by updating the configuration and click `Update`. **Note**: In case of configuration change, all users will be logged out of Devtron and will have to login again.
## Configuration Payload
* `type` : Any platform name such as (Google, GitLab, GitHub etc.)
* `name` : Identity provider platform name
* `id` : Identity provider platform which is a unique ID in string. (Refer to [dexidp.io](https://dexidp.io/)
* `config` : User can put connector details for this key. Platforms may not have same structure but common configurations are `clientID`, `clientSecret`, `redirectURI`.
* `hostedDomains` : Domains authorized for SSO login (e.g. *gmail.com*, *devtron.ai*)
***
## Next Steps
After configuring an SSO for authentication, you must [add users](/operator-guide/authorization/user-permissions.md#add-user) in Devtron for them to be able to log in via SSO.
In case you have enabled auto-assign permissions in [Microsoft](/operator-guide/authorization/sso-login-services/microsoft.md) or [LDAP](/operator-guide/authorization/sso-login-services/ldap.md), relevant [permission groups](/operator-guide/authorization/permission-groups.md#add-group) must also exist in Devtron for a successful login.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.dashboard.devtron.ai/operator-guide/authorization/sso-login-services.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.