> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goguardian.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Staff SAML SSO

> Set up SAML single sign-on for staff in GoGuardian Org Management so users can access GoGuardian products with their existing identity provider credentials.

SAML lets users access multiple web applications with one set of credentials by securely exchanging authentication data between an identity provider (IdP) and a service provider. GoGuardian administrators can enable SAML for their staff as an additional sign-in option for GoGuardian Admin, GoGuardian Teacher, GoGuardian Beacon, and Org Management.

## Review Requirements

Before setting up SAML, confirm you have:

* Super User or custom role access to the Staff SAML SSO section of [manage.goguardian.com](https://manage.goguardian.com/integrations/staff-saml-config)
* Access to your organization's identity provider

## Set Up SAML

1. {/* TECH-ACCURACY: Verify nav label — source says "Data Sources > Staff SAML SSO" but current portal may use "Integrations > Staff SAML SSO" */} Go to [manage.goguardian.com](https://manage.goguardian.com) and select **Staff SAML SSO** from the navigation menu.

<img src="https://mintcdn.com/goguardian/uc_BCgW-LheYXukp/images/screenshots/org-management/saml-sso/step-01.png?fit=max&auto=format&n=uc_BCgW-LheYXukp&q=85&s=069f923d3fe22cc2f1f7d3a0bb9cf84c" alt="GoGuardian Org Management — Staff SAML SSO configuration page" width="2880" height="1800" data-path="images/screenshots/org-management/saml-sso/step-01.png" />

2. Click **Add Additional Provider**.
3. Enter an IdP nickname, select **XML File URL** or **XML File Upload / Manual Configuration**, and fill in the required fields from your IdP.
4. Copy both the **ACS URL** and **Entity ID** and enter them in your IdP configuration.
5. Customize the login button label and styling.

<img src="https://mintcdn.com/goguardian/aEDDL1SK1waBtbUG/images/screenshots/saml-sso/step-01.png?fit=max&auto=format&n=aEDDL1SK1waBtbUG&q=85&s=d0ed9a70c0208763bde350dbd99ec87e" alt="Customize the login button label and styling." width="2804" height="1410" data-path="images/screenshots/saml-sso/step-01.png" />

6\. Click **Save Configuration**.
7\. Verify the result: The new SAML provider appears in your list of configured providers.

<Note>
  You can create multiple SAML connections if staff credentials are split across more than one identity provider.
</Note>

## Sign In with SSO as Staff

1. Go to GoGuardian Admin, GoGuardian Beacon, GoGuardian Teacher, or Fleet.
2. Click **Sign in with Single Sign-On**.

   <img src="https://mintcdn.com/goguardian/r1PejCysJBB6PfmM/images/screenshots/org-management/saml-sso/step-02.png?fit=max&auto=format&n=r1PejCysJBB6PfmM&q=85&s=9c888be115546eb264cd60dae534e10b" alt="GoGuardian login page showing Sign in with Single Sign-On button for staff accounts" width="1440" height="900" data-path="images/screenshots/org-management/saml-sso/step-02.png" />
3. Enter your staff email address.
4. Select your account from the list.

<Note>
  SSO sign-in through third-party applications is not currently supported. Use the **Sign in with Single Sign-On** option on GoGuardian's login pages, or use the direct SAML sign-in link: `https://account.goguardian.com/#/staff-saml-login`
</Note>

## Supported Identity Providers

GoGuardian supports any IdP using SAML 2.0. Verified compatible providers include Google, Azure, OneLogin, and ClassLink.