> ## Documentation Index
> Fetch the complete documentation index at: https://superwhisper-docs-cloud-model-rate-limits.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# SAML 2.0

> Set up Single Sign-On with SAML 2.0 for your Superwhisper Enterprise account, with Okta, Microsoft Entra, Google, or any SAML provider.

> **Note:** If you haven't created your enterprise account yet, head to [Getting Started](/enterprise/getting-started) first.

## Configuring SAML Authentication

### Inviting Technical Team Members

Invite IT or Security team members to help with SAML setup. Until SAML is fully configured, technical members can only access the dashboard via a magic invitation link.

<img src="https://mintcdn.com/superwhisper-docs-cloud-model-rate-limits/pbQcuJvzOhF7n2dL/images/enterprise/saml_invite.png?fit=max&auto=format&n=pbQcuJvzOhF7n2dL&q=85&s=c1f77cd282f642ab6076c4e2968cb8ca" alt="Inviting Members for SAML Setup" width="3362" height="1480" data-path="images/enterprise/saml_invite.png" />

To invite technical team members:

1. Go to the **Members** tab in your dashboard
2. Invite via email as admin (see [Member Management](member-management) for detailed instructions)

This allows your technical team to:

* Access the Authentication page for SAML configuration
* View organization settings and your unique Assertion Consumer Service URL
* Help with technical setup and troubleshooting

### Setting Up SAML

Navigate to the Authentication page on your dashboard to find everything you need for SAML setup, including your organization's unique Assertion Consumer Service URL.

<img src="https://mintcdn.com/superwhisper-docs-cloud-model-rate-limits/pbQcuJvzOhF7n2dL/images/enterprise/saml_setup.png?fit=max&auto=format&n=pbQcuJvzOhF7n2dL&q=85&s=5ba0cdc07f71deed7c25359cbfcd0442" alt="SAML Configuration Interface" width="2978" height="1790" data-path="images/enterprise/saml_setup.png" />

### Authentication Methods

Superwhisper offers three authentication methods:

1. **Single Sign-On (SSO)** - Use SAML 2.0 for enterprise SSO integration
2. **Google OAuth** - Allow organization members to sign in with Google accounts
3. **Magic Link** - Members sign in via a one-time email link. No SSO required

Only one authentication method can be active at a time.

### Setting Up Single Sign-On

Superwhisper supports SAML 2.0 for Single Sign-On. Follow these steps to configure your authentication provider:

#### 1. Select Your Identity Provider

Choose from the supported identity providers:

* **Google** - For Google Workspace organizations
* **Okta** - For Okta identity management
* **Microsoft** - For Azure AD/Microsoft Entra ID
* **Custom** - For other SAML 2.0 compatible providers

#### 2. Configure SP Metadata

Copy the following attributes into your SAML configuration:

**Entity ID:**

```
https://superwhisper.com
```

**Assertion Consumer Service URL:**

```
https://api.superwhisper.com/_external/v1/auth/sso/saml5/callback/{customToYourInstance}
```

> **Note:** Your Assertion Consumer Service URL is unique to your organization. Copy it from the authentication screen.

#### 3. Upload SAML Metadata

Select your identity provider and upload your SAML metadata XML file provided by your authentication provider.

#### 4. Test Your Configuration

Use the **Test** button in the Single Sign-On section to verify your SAML configuration. Depending on the identity provider, records can take a couple of minutes to propagate on their end.

## Next Steps

* [SCIM Provisioning](/enterprise/scim) to automate user provisioning and deprovisioning
* [MDM & Silent Deployment](/enterprise/mdm-deployment) to roll the app out across your fleet with auto-activation through SSO

## Support

Questions about SAML setup? Email [enterprise@superwhisper.com](mailto:enterprise@superwhisper.com), request a shared Slack channel, or schedule a call.