---
title: Configuring SSO options
slug: configuring-sso-options
docTags: 
createdAt: 2022-04-22T16:07:35.000Z
---

You can configure single sign-on (SSO) to allow your users to log in using your organization's identity provider without generating a separate ChartHop password. While it is optional, we recommend that you require SSO, as it's easier and safer for your users.

:::hint{type="info"}
ChartHop supports using one SAML-based identity provider at a time, as only one SSO metadata file can be associated with your ChartHop account. Because Google SSO does not use SAML 2.0, it is possible to enable Google SSO in addition to a SAML-based identity provider. 



If you want to use a SAML 2.0 identity provider that is not listed here, contact ChartHop support for assistance.
:::

When you enable SSO, you can upload your SSO metadata file and customize your SSO login button image.

![Single Sign On](https://api.archbee.com/api/optimize/CXAjUAezd9VEEVQBIYmdw/ptjeRG4lp7zrLMWKww0bI_access-settings-sso.png)

### Supported Identity providers

ChartHop supports the following Identity providers:

| **SSO Option**         | **Description**                                                                                                                                          |
| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Google                 | Enables Google SSO login. Recommended if your organization uses G Suite. Can be used in conjunction with an additional SAML 2.0-based SSO configuration. |
| Microsoft              | Enables Microsoft SSO login. Recommended if your organization uses Azure Active Directory.                                                               |
| Okta                   | Enables Okta SSO login. Recommended if your organization uses Okta.                                                                                      |
| OneLogin               | Enables OneLogin SSO login. Recommended if your organization uses OneLogin.                                                                              |
| Azure Active Directory | Enables Azure SSO login. Recommended if your organization uses Azure Active Directory.                                                                   |
| ADP                    | Enables ADP SSO login when ChartHop is connected to ADP via the ADP Marketplace app.                                                                     |

### Allowing password login

If you choose not to use SSO to manage user logins, you also have the option to use standard password logins.

:::hint{type="warning"}
For security reasons it is generally *not recommended* to use both SSO and password login unless you have users from outside your organization who lack SSO to sign in.
:::

You have the option to restrict the password login from specific IP addresses. If you would like to do so, add the IP addresses in the** Only allow password-based login from specific IPs (comma-separated) **input. 

Note that this only applies to password login, so users with SSO will be able to login from any IP address.