> ## Documentation Index
> Fetch the complete documentation index at: https://superwhisper.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# SAML 2.0

> Set up SAML 2.0 single sign-on for Superwhisper Enterprise. Works with Okta, Microsoft Entra, Google, or any SAML 2.0 provider.

> [!NOTE]
>
> If you haven't created your enterprise account yet, start with [Getting started](https://superwhisper.com/docs/enterprise/getting-started.md).

## Which identity providers does Superwhisper support?

Superwhisper supports SAML 2.0 single sign-on with **Google** (Google Workspace), **Okta**, **Microsoft** (Azure AD and Microsoft Entra ID), and any other SAML 2.0 compatible provider through the **Custom** option.

Organization owners, admins, and IT members can configure SAML from the dashboard.

## Configuring SAML authentication

### Inviting technical team members

Invite IT or Security team members to help with SAML setup. Until SAML is fully configured, technical members can only access the dashboard via a magic invitation link.

![Inviting Members for SAML Setup](https://mintcdn.com/superwhisper/nuTetdsD4WaOh6uF/images/screens/dashboard/members-invite.png?fit=max\&auto=format\&n=nuTetdsD4WaOh6uF\&q=85\&s=d7ef24b6edea410bb9d40d4094ad258a)

To invite technical team members:

1. Go to the **Members** tab in your dashboard
2. Invite via email as admin (see [Member management](https://superwhisper.com/docs/enterprise/member-management.md) for detailed instructions)

This allows your technical team to:

* Access the Authentication page for SAML configuration
* View organization settings and your unique Assertion Consumer Service URL
* Help with technical setup and troubleshooting

### Setting up SAML

Navigate to the Authentication page on your dashboard to find everything you need for SAML setup, including your organization's unique Assertion Consumer Service URL.

![SAML Configuration Interface](https://mintcdn.com/superwhisper/nuTetdsD4WaOh6uF/images/screens/dashboard/sso-settings.png?fit=max\&auto=format\&n=nuTetdsD4WaOh6uF\&q=85\&s=2830f01fbae415aa705ed600a2208ccb)

### Authentication methods

Superwhisper offers three authentication methods:

1. **Single Sign-On (SSO)**: SAML 2.0 for enterprise SSO integration
2. **Google OAuth**: members sign in with their Google accounts
3. **Magic Link**: members sign in via a one-time email link, with no SSO required

Only one authentication method can be active at a time.

### Setting up single sign-on

Superwhisper supports SAML 2.0 for Single Sign-On. Follow these steps to configure your authentication provider:

#### 1. Select your identity provider

Choose from the supported identity providers:

* **Google**: for Google Workspace organizations
* **Okta**: for Okta identity management
* **Microsoft**: for Azure AD / Microsoft Entra ID
* **Custom**: for other SAML 2.0 compatible providers

#### 2. Configure SP metadata

Copy the following attributes into your SAML configuration:

**Entity ID:**

```
https://superwhisper.com
```

**Assertion Consumer Service URL:**

```
https://api.superwhisper.com/_internal/v1/auth/sso/saml2/callback/{providerId}
```

> [!NOTE]
>
> Your Assertion Consumer Service URL is unique to your organization, and `{providerId}` is filled in for you. The dashboard shows the exact Entity ID and Assertion Consumer Service URL for your org. Copy both from the authentication screen.

#### 3. Upload SAML metadata

Select your identity provider and upload the SAML metadata XML file from your authentication provider.

#### 4. Test your configuration

Use the **Test** button in the Single Sign-On section to verify your SAML configuration. Depending on the identity provider, records can take a couple of minutes to propagate on their end.

## Next steps

* [SCIM provisioning](https://superwhisper.com/docs/enterprise/scim.md) to automate user provisioning and deprovisioning
* [MDM and silent deployment](https://superwhisper.com/docs/enterprise/mdm-deployment.md) to roll the app out across your fleet with auto-activation through SSO

## Support

Email [enterprise@superwhisper.com](mailto:enterprise@superwhisper.com), request a shared Slack channel, or schedule a call with the team.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.