> ## Documentation Index
> Fetch the complete documentation index at: https://basedash.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Domains and SSO

> Add your own domains, configure SSO, and manage enterprise identity

> These features are only available on our **Enterprise plan**

You can log in or have new members sign up to Basedash using single sign-on (SSO). You will first need to add a domain and verify it before you can configure SSO for your organization.

## Domains

To add a domain, navigate to your organization settings from the command menu, and select the "Domains" option. From there, you can add a domain and proceed with verifying it by adding a TXT record in your domain provider's interface.

<img className="block" src="https://mintcdn.com/basedash/k0a5XWSdyCDNnQPO/images/domain-configuration.png?fit=max&auto=format&n=k0a5XWSdyCDNnQPO&q=85&s=477e7cdf62842a499a1bc1f7b3350567" alt="Domain configuration" width="1658" height="1226" data-path="images/domain-configuration.png" />

### TXT record verification

We provide both a TXT subdomain and a TXT value that you must add to your domain provider's interface. Then, you can click the option in Basedash to check the domain's verification status.

Once your domain passes the verification check, you will be able to enable domain-related features such as auto-join and SSO.

### Auto join

Once your domain is verified, you can enable auto-join. This allows any user who signs up or logs in with an email at your verified domain to automatically have access to your organization.

### SSO

Once your domain is verified, you can enable SSO. Basedash supports SSO with SAML 2.0 and OIDC. For SAML setups, add your SSO provider's XML metadata, which we use to configure the connection with your SSO provider. We provide an ACS URL that you will need to enter on your SSO provider's side to complete the setup.

If you encounter any difficulties, please contact us for more details.

Once SSO is properly configured, users will only be able to log in and sign up with emails at your verified domain using your SSO provider's login flow.

#### Supported SSO providers

Basedash supports major identity providers that use SAML 2.0 or OIDC. This includes:

* Okta
* OneLogin
* JumpCloud
* Rippling
* Ping Identity
* Auth0
* Microsoft Entra ID (formerly Azure AD)
* Google Workspace

If your identity provider supports SAML 2.0 or OIDC, it will work with Basedash. Contact us if you need help configuring your specific provider.

### SCIM provisioning

Enterprise organizations can use SCIM to sync users and groups from their identity provider into Basedash. SCIM keeps provisioning and deprovisioning aligned with your existing identity lifecycle, so access changes in your identity provider are reflected in Basedash.

## Self-hosting support

Self-hosted deployments also support SSO integration. For organizations using [self-hosting](/self-hosting/overview), we can configure SSO with your existing identity providers. Contact us to discuss your specific SSO or SCIM requirements for self-hosted deployments.
