# Single Sign-On

> Fern SSO enables enterprise teams to access documentation securely using corporate credentials. Supports SAML 2.0 and OIDC protocols.

<Warning title="Enterprise feature">
  This feature is available only for the [Enterprise plan](https://buildwithfern.com/pricing). To get started, reach out to [support@buildwithfern.com](mailto:support@buildwithfern.com).
</Warning>

Fern’s Single Sign-On (SSO) is an enterprise feature that lets your team securely access your docs through your organization’s identity provider.

<Note>
  SSO does not support Role-Based Access Control or API Key Injection.
</Note>

## What SSO unlocks

When SSO is enabled for your organization, authenticated users of Fern can:

* **Use the Fern Editor**: Make edits to your docs from the browser
* **Send Authenticated Preview Links** Only authenticated users can view [preview links](/learn/docs/preview-publish/preview-changes#preview-links)

## How it works

Fern's SSO integration allows your team to use their existing corporate credentials to access your Fern Docs site.

### Architecture diagram

```mermaid
sequenceDiagram
    autonumber
    participant U as User
    participant F as Fern Docs
    participant I as Identity Provider

    U->>F: Click "Login" 
    F->>I: Redirect to SSO login
    
    Note over I: User authenticates with corporate credentials
    
    I->>I: Validate user credentials
    I->>F: Redirect back with fern_token
    F->>F: Grant access to organizational features
    F->>U: Show docs site
```

## Supported identity providers

Fern supports SSO integration with any identity provider that implements industry-standard protocols:

* **SAML 2.0**: Compatible with providers like Okta, OneLogin, Azure AD, and others
* **OIDC (OpenID Connect)**: Works with Google Workspace, Auth0, and other OIDC-compliant providers

## Setting up SSO

Reach out via Slack or [contact our team](https://buildwithfern.com/contact) to begin the SSO setup process. Fern will work with one of your security administrators to connect to your identity provider.