***

title: Single Sign-On
subtitle: Secure access to your documentation using corporate credentials
-------------------------------------------------------------------------

<Warning title="Enterprise feature">
  This feature is available only for the [Enterprise plan](https://buildwithfern.com/pricing). To get started, reach out to [support@buildwithfern.com](mailto:support@buildwithfern.com).
</Warning>

SSO lets your team access your docs through your organization's identity provider using SAML 2.0 or OIDC. Like [RBAC](/learn/docs/authentication/features/rbac) and [API key injection](/learn/docs/authentication/features/api-key-injection), SSO uses the [`fern_token`](/learn/docs/authentication/overview#how-authentication-works) cookie to identify authenticated users. SSO unlocks the [Fern Editor](/learn/docs/writing-content/fern-editor) for browser-based editing and [authenticated preview links](/learn/docs/preview-publish/preview-changes#preview-links).

<Note>
  SSO provides login-based access control but does not support role management or API key injection. For granular access control, use 

  [RBAC](/learn/docs/authentication/features/rbac)

   instead.
</Note>

## How it works

When a user clicks **Login**, Fern redirects them to your identity provider. After authenticating with their corporate credentials, the identity provider redirects back to Fern with a `fern_token`, granting access to your docs.

<Accordion title="Architecture diagram">
  ```mermaid
  sequenceDiagram
      autonumber
      participant U as User
      participant F as Fern Docs
      participant I as Identity Provider

      U->>F: Click "Login"
      F->>I: Redirect to SSO login

      Note over I: User authenticates with corporate credentials

      I->>I: Validate user credentials
      I->>F: Redirect back with fern_token
      F->>F: Grant access to organizational features
      F->>U: Show docs site
  ```
</Accordion>

## Setup

Fern supports any SAML 2.0 or OIDC provider (Okta, Google Workspace, Auth0, Azure AD, OneLogin, etc.). [Contact Fern](https://buildwithfern.com/contact) or reach out via Slack. Fern will work with your security team to connect to your identity provider.