> ## Documentation Index
> Fetch the complete documentation index at: https://fillout.com/help/llms.txt
> Use this file to discover all available pages before exploring further.
# SAML Single Sign On
> Enable Single Sign-On (SSO) through various providers like Okta, Azure AD, and all SAML providers in Fillout to streamline user authentication and access management.
## Pre-requisites
* Organization should be on **Fillout**'s [Enterprise Plan](https://www.fillout.com/enterprise)
* Your account must have an **Admin** role in your team
SAML is available on Fillout's [Enterprise Plan](https://www.fillout.com/enterprise).
## Set up SSO
After signing up or upgrading your plan, you will be sent setup instructions via WorkOS.
## How to Log in Using SSO
Once SSO is configured, your team members can log in by clicking on `Login with SSO` on the Fillout login page and entering their company email.
## How provisioning users works
Fillout does not currently auto-provision users when they are added to your SSO provider. Instead, an account in Fillout will be created when the user logs into Fillout for the first time, using the SSO login.
**Enforcing SSO**
Contact [support@fillout.com](mailto:support@fillout.com) if you would like to enforce SSO for all users on your account.
By default, users added to your account before enabling SSO will still be able to authenticate with their prior authentication method (e.g., password or Google login). At your request, we can enforce SSO for all users going forward, including existing users. Existing users will still retain all their prior details once they login with SSO.
SAML SSO can only be enforced for a team if your current session was authenticated via SAML SSO. This ensures your configuration works correctly before restricting team access, preventing accidental loss of access.
**SSO on forms**
Fillout also supports adding SSO to your forms and pre-filling fields with employee information. [Learn more here.](/help/sso-form-login)