---
schema_version: "1"
id: 72f9260298fee41ddc0339d420bb26bb2e57cae2d19871675b0c368541728b95
title: AI Agent for SSO Management
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_agentforce_superagent_ssoassistance.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_agentforce_superagent_ssoassistance.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 71d34f7d2468dccee8d0dc2be393361c1049cbeefa8addbc99bdbf0fbd29e966
description: Single Sign-On Assistance is a conversational specialized AI agent that helps employees troubleshoot Single Sign-On authentication issues. Use this agent to resolve login failures, diagnose credential synchronization problems, and report application-specific Single Sign-On disruptions. This agent restores access to identity-protected services.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# AI Agent for SSO Management

Single Sign-On Assistance is a conversational specialized AI agent that helps employees troubleshoot Single Sign-On authentication issues. Use this agent to resolve login failures, diagnose credential synchronization problems, and report application-specific Single Sign-On disruptions. This agent restores access to identity-protected services.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

## Service Catalog Items

This specialized agent automatically uses these SCI templates to fulfill your request. You can configure additional service catalog item templates to support similar applications and request types.

- [Report SSO Issues](https://help.salesforce.com/s/articleView?id=service.it_srvcs_rqst_mgmt_sci_ntwrk_rpt_sso_issues.htm&type=5&language=en_US)

## Agent Actions

These actions run automatically during your conversation with the specialized agent.

- [Answer Questions with Knowledge](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_answrplcyquestion.htm&type=5&language=en_US)
- [Get Eligible Service Catalog Items](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_getelgblesrvcecatalogitems.htm&type=5&language=en_US)
- [Execute Service Catalog Item Flow](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_executeservicecatalogitemflow.htm&type=5&language=en_US)
- [Get Product Launch Card](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_getproductlaunchcard.htm&type=5&language=en_US)
- [Create Incident For Employee](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_createincidentforemployee.htm&type=5&language=en_US)

![Example](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-it_service-264-0-0-production-enus/0a574a10-4c7a-4681-aacf-0767f8beaad4/images/icon_example.png)

Example

Troubleshooting SSO login failure

Scenario: Employee Frank can't log in to the company intranet using SSO and keeps getting an authentication error.

- Frank: I can't log in to the intranet. It keeps saying "Authentication failed" when I use SSO, but my password works for email.
- AI Agent: I can help troubleshoot that SSO issue. To confirm before I proceed, did you recently change your network password, and are you seeing this error on all applications or just the intranet?
- Frank: I changed my password yesterday, and so far it's only the intranet that's failing.
- AI Agent: The issue is likely a credential synchronization delay after your password change. I've manually triggered a sync for your account with the SSO identity provider. Try logging in to the intranet again in about 5 minutes. If it still fails, I'll create an incident for the identity team to investigate further.