> ## Documentation Index
> Fetch the complete documentation index at: https://docs.abbyy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up Single Sign-On

> Configure Single Sign-On in ABBYY FlexiCapture: create an app in your identity provider, and then add a configuration with a certificate in the Console.

To set up Single Sign-On authentication, configure your identity provider, and then add a matching configuration in ABBYY FlexiCapture.

## Set up the identity provider

<Steps>
  <Step title="Create an application">
    Create an application in the identity provider. If several tenants are used, create a separate application for each.
  </Step>

  <Step title="Enable Single Sign-On">
    Enable the Single Sign-On authentication method in the identity provider.
  </Step>

  <Step title="Specify the assertion URL">
    In the identity provider settings, specify the URL that ABBYY FlexiCapture uses to receive the assertion message after successful authentication.
  </Step>

  <Step title="Save the certificate and URL">
    Save the public certificate in Base64 format, and save the URL that the application uses to access the external identity provider.
  </Step>
</Steps>

## Configure ABBYY FlexiCapture

Set up the required parameters in the Administration and Monitoring Console.

<Info>
  Only the ABBYY FlexiCapture administrator can add and configure Single Sign-On on the default tenant. On other tenants, tenant administrators can configure Single Sign-On.
</Info>

<Steps>
  <Step title="Launch the console">
    Launch the Administration and Monitoring Console.
  </Step>

  <Step title="Open the Single Sign-On settings">
    Go to **Settings → Single Sign-On**.
  </Step>

  <Step title="Add a configuration">
    Click **Add Configuration**.
  </Step>

  <Step title="Specify the parameters">
    In the dialog box that opens, specify the required parameters:

    * **Name** – The name of the external identity provider that is contacted when the user clicks the **Log in with \[IdP Name]** button.
    * **Reference** – The URL used to access the server of the external identity provider.
    * **Upload Image File** – The path to the image used for the new button (images in `.svg`, `.jpg`, and `.png` formats are supported).
    * **Upload Certificate File** – The path to the public certificate.
  </Step>

  <Step title="Save the configuration">
    Click **OK**. The new configuration is added to the list. To change it, click **Edit**.
  </Step>
</Steps>

<Note>
  You can specify multiple identity providers.
</Note>

As a result, the **Log in with \[IdP Name]** button appears on the station's login page.

To use ABBYY FlexiCapture, users must have the appropriate permissions. For more information about accounts and permissions, see [User roles and permissions](/flexi-capture/web-stations/monitoring-console/permissions).