# Source: https://docs.datadoghq.com/cloudcraft/account-management/enable-sso-with-generic-idp.md

---
title: Enable SSO with a Generic Identity Provider
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Cloudcraft (Standalone) > Account Management > Enable SSO with a
  Generic Identity Provider
---

# Enable SSO with a Generic Identity Provider

Enabling Single Sign-On (SSO) in Cloudcraft allows you to simplify authentication and login access to Cloudcraft.

This article helps you set up SSO if you do not have a specific guide for your identity provider. If your identity provider is Azure AD or Okta, see the following articles:

- [Enable SSO With Azure AD](https://docs.datadoghq.com/cloudcraft/account-management/enable-sso-with-azure-ad/)
- [Enable SSO With Okta](https://docs.datadoghq.com/cloudcraft/account-management/enable-sso-with-okta/)

For more general information on using SSO with Cloudcraft, check out [Enable SSO in Your Account](https://docs.datadoghq.com/cloudcraft/account-management/enable-sso/).

## Setting up SAML/SSO{% #setting-up-samlsso %}

{% alert level="info" %}
Only the account owner can configure the SAML SSO feature. If the account owner is unable to configure SSO, [contact the Cloudcraft support team](https://app.cloudcraft.co/app/support "Contact the Cloudcraft support team") to enable this feature.
{% /alert %}

1. In Cloudcraft, navigate to **User** > **Security & SSO**.
1. The details you need to create a new application with Azure can be found in the **Cloudcraft service provider details** section.

{% image
   source="https://datadog-docs.imgix.net/images/cloudcraft/account-management/enable-sso-with-generic-idp/service-provider-details.f325caeac04613338a635d602f26a32f.png?auto=format"
   alt="Screenshot of Cloudcraft service provider details for Identity Provider configuration with entity ID and assertion consumer service URL." /%}

Log in to your identity provider as an administrator.

Follow their documentation to create a new application for SAML integration.

Map their fields with Cloudcraft's fields. For reference, the fields are usually mapped as follows, with the first one being the label used by your identity provider and the second one being the label at Cloudcraft.

- **Single sign on URL**: Assertion Consumer Service URL
- **Audience URI**: Service Provider Entity ID
- **Name ID**: NameId Format

If the **Name ID** field is a dropdown, select **emailAddress** or similar.

{% alert level="info" %}
You can also include an app logo to make it easier for users to see which application they are signing in to. We have one that fit most provider's restrictions over here.
{% /alert %}
Configure the application to allow access to all the relevant users within your organization.Download the metadata file generated by your provider â sometimes called federation XML.Navigate back to Cloudcraft and upload your metadata XML file.
{% image
   source="https://datadog-docs.imgix.net/images/cloudcraft/account-management/enable-sso-with-generic-idp/upload-metadata.ac805362516cf79e21546b9ade304133.png?auto=format"
   alt="Successfully configured SAML Single Sign-On status with identity provider URL visible in security settings interface." /%}
Toggle the **SAML Single Sign-On is enabled** option.If you prefer to have your users access Cloudcraft only via your identity provider, enable the **Strict mode** option.