> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kleep.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Single Sign-On (SAML)

> Let your team sign in to the Kleep Analytics Dashboard with your company identity provider.

> [!NOTE]
>
> **Enabled on request.** SSO is set up by the Kleep team for each brand. Email **[support@kleep.ai](mailto:support@kleep.ai)** to get started.

The Kleep Analytics Dashboard supports Single Sign-On through **SAML 2.0**. It works with any SAML identity provider (IdP), such as Okta, Microsoft Entra ID, Google Workspace or OneLogin.

## Kleep service provider metadata

Use these values when you create the Kleep application in your identity provider.

| Field | Value |
| - | - |
| **Entity ID** (Audience URI) | `https://kpmplliykjmlrzoodach.supabase.co/auth/v1/sso/saml/metadata` |
| **ACS URL** (Single sign-on URL) | `https://kpmplliykjmlrzoodach.supabase.co/auth/v1/sso/saml/acs` |
| **ACS binding** | `HTTP-POST` |

> [!WARNING]
>
> **Leave Single Logout (SLO) disabled.** Kleep does not support SAML Single Logout. Users sign out from the dashboard, and sessions expire automatically so that people removed from your identity provider lose access.

## Assertion requirements

| Setting | Value |
| - | - |
| **Name ID format** | `EmailAddress` |
| **Name ID value** | The user's email address |
| `email` attribute | Required: the user's email address |
| `firstName` / `lastName` attributes | Optional |

## Setup steps

**1. Create a SAML application in your identity provider**

Create a new SAML 2.0 application named **Kleep**. Use the Entity ID and ACS URL above.

**2. Configure the assertion**

Set the Name ID format to `EmailAddress` and add the `email` attribute.

**3. Assign users**

Assign the application to the people who need access to the Kleep Analytics Dashboard.

**4. Send your details to Kleep**

Email **[support@kleep.ai](mailto:support@kleep.ai)** with:

* Your IdP **metadata URL**
* The **email domains** your users sign in with (for example `yourbrand.com`)

**5. Kleep enables SSO for your brand**

The Kleep team registers your identity provider and confirms once SSO is active.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.