---
schema_version: "1"
id: ca5d3a6a74de1edc7c6a46740ca28424d5f260e6d6aa5fba178b40288d6c773c
title: Enable Single Sign-on for FedRAMP
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/platform_o_fedramp_enable_single_sign_on.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_enable_single_sign_on.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 669a93b70bf330999cda9a4231d813373a4bd06d7b819cc2634c8b0793b9e865
description: Within the Own Government Cloud platform, single sign-on (SSO) is the only authentication method available for user login. Own from Salesforce supports single sign-on using SAML 2.0. Instead of relying on local authentication for password and security policies, you can set your own authentication using your managed identity provider (IdP).
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Enable Single Sign-on for FedRAMP

Within the Own Government Cloud platform, single sign-on (SSO) is the only authentication method available for user login. Own from Salesforce supports single sign-on using SAML 2.0. Instead of relying on local authentication for password and security policies, you can set your own authentication using your managed identity provider (IdP).

Single sign-on is supported using SAML 2.0 and IdP-initiated flows. The identity provider must allow the SAML Assertion to be used in order to authenticate. The SSO application needs to be created in your IdP provider before SSO can be enabled.

Single sign-on settings can be accessed only by Admin and Master Admin users. These settings are hidden from all other users. Admin users have read-only access, and Master Admins can edit settings.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-own_from_salesforce-264-0-0-production-enus/8ac98673-ede2-4046-a41e-2d5c846f24ff/images/icon_note.png)

Note Users can't set their passwords directly within the Own application. The password length, complexity rules, expiration, and password history cannot be enforced within Own. Instead, this is handled through their identity provider. Users can't use the Forgot/Reset Password link. If they attempt to do so, they are directed to their identity provider for assistance.

1. Log in to the Own Data Platform.
2. In the Account Options menu, select **Account Settings**.
3. On the Account Settings page, select the **Security** tab.
4. Select Single Sign On (SSO) and enter the information:
    1. Identity Provider name: Provide a name for the single sign-on provider.
    2. SAML issuer: Enter the identity provider issuer.
    3. Certificate fingerprint: Ensure that the downloaded certificate has a .pem file extension and click **Upload certificate...** to add the certificate.
    4. Logout URL: Provide the URL for a web page to display after logging out.
5. Save your changes.

- **[Configure Identity Providers (IdP) for SSO in Own Government Cloud](https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_config_identity_providers.htm&release=264.0.0&type=5)**  
    Customers can configure their own authentication using managed identity providers. The Own Government Cloud platform supports Azure IdP, Okta IdP, and Salesforce IdP. We recommend that Master Administrators follow the configuration instructions for their provider.