> For the complete documentation index, see [llms.txt](https://docs.sled.so/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sled.so/sso.md).

# Single Sign-On

Sled supports Single Sign-On (SSO), allowing your users to authenticate using their existing identity provider credentials instead of managing separate passwords.

## Supported Providers

* [Azure Active Directory](/sso/azure-active-directory.md) - Microsoft Entra ID (OAuth 2.0 / OpenID Connect)

## How SSO Works in Sled

When SSO is enabled, users see a **"Sign in with Microsoft"** button on the login page. Clicking it redirects them to your identity provider for authentication. After successful login, users are automatically created in Sled and assigned a role based on their group memberships.

### Key Features

* **Automatic user provisioning** - Users are created in Sled on first login, no manual setup needed
* **Group-based access control** - Map identity provider groups to Sled roles (Admin, Editor, Viewer)
* **Default viewer access** - All authenticated users get read-only access without any extra configuration
* **MFA support** - Works with your identity provider's Multi-Factor Authentication policies
* **Optional password fallback** - Keep password login enabled alongside SSO during transition