# How to set up SSO for organizations

1. Open the organization that should use SSO.
2. Visit **Organization settings**.
3. Expand **SAML 2.0 SSO**.
4. Copy the NobGit **ACS URL** and **Entity ID / Metadata URL** into your identity provider.
5. Check **Enable SAML SSO**.
6. Enter the IdP Entity ID, IdP SSO URL, optional IdP SLO URL, and IdP X.509 certificate.
7. Confirm attribute names for email, username, and display name.
8. Optionally restrict **Allowed email domains**.
9. Optionally enable **Create NobGit users on first SAML login**.
10. Select **Save SAML settings**, then use **Test SAML sign-in**.

Use the NobGit service provider values shown in the SAML panel when configuring your identity provider.

- [Previous: Cloudflare](Deploy with Cloudflare.md)

- [Next: Docs home](NobGit Docs.md)