> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://developers.alephant.io/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://developers.alephant.io/_mcp/server.

# Single Sign-On

> Connect AIvis to an enterprise identity provider for unified user access.

Single sign-on connects AIvis to the enterprise identity system. It reduces local account management and keeps onboarding, offboarding, and permission changes under centralized governance.

## Management Boundary

| Area            | Guidance                                                  |
| --------------- | --------------------------------------------------------- |
| Identity Source | Use an approved identity provider and domain.             |
| Mapping         | Define user, group, role, and workspace mapping.          |
| Fallback        | Define emergency admin login and recovery behavior.       |
| Audit           | Record login, failure, configuration, and mapping events. |

## Before Configuration

* Confirm provider metadata, callback URLs, and certificates are valid.
* Plan admin accounts, test accounts, and fallback access.
* Validate with security, user-group, and localization settings.

## Verification

* Log in, log out, and log in again with a test user.
* Test an unauthorized domain or unmapped user and confirm denial.
* Confirm login events and user mapping are auditable.