- title: Manage Git PATs

localurl: /docs/administration/user-self-management/manage-pats/

- title: Codefresh IP addresses

- title: Reference

icon: images/home-icons/guides.png

url: "/pipeline-execution-context"

- title: Auditing actions in Codefresh

url: "/audit"

- title: User self-management

sub-pages:

- title: Managing personal settings

url: "/user-settings"

- title: Managing Git PATs

- title: Reference

url: "/reference"

|[Cloud storage settings]({{site.baseurl}}/docs/testing/test-reports/#connecting-your-storage-account) | `Admin`|

|[Shared configuration]({{site.baseurl}}/docs/pipelines/configuration/shared-configuration/) | `Admin`|

|[API token generation]({{site.baseurl}}/docs/integrations/codefresh-api/#authentication-instructions) | `Admin`|

|[Runtime environment selection]({{site.baseurl}}/docs/pipelines/pipelines/#pipeline-settings) | `Admin`|

|[Slack settings]({{site.baseurl}}/docs/integrations/notifications/slack-integration/) | `Admin`|

|[Audit logs]({{site.baseurl}}/docs/administration/audit-logs/) | `Admin`|

on clusters, docker registries, git integrations, shared configurations etc.

* **Administrator**: With this role, users have full access to accounts, and can change all settings, so make sure that they are trusted colleagues.

For guidelines on access control, see [Access control]({{site.baseurl}}/docs/administration/account-user-management/access-control/).

[Access control]({{site.baseurl}}/docs/administration/account-user-management/access-control/)

[Setting up OAuth authentication for Git providers]({{site.baseurl}}/docs/administration/account-user-management/oauth-setup)

group: single-sign-on

redirect_from:

- /docs/enterprise/single-sign-on/sso-ldap/

toc: true

title: "Setting up OIDC Federated SSO"

description: "OpenID Connect (OIDC) Single Sign-On (SSO) setup"

toc: true

1. Configure SSO settings for the IdP:

This generally includes defining settings both in Codefresh and in the IdP.

Codefresh supports OIDC SSO for the following:

1. Test integration with the IdP:

%}

{:start="3"}

You can select an IdP as the default SSO provider for a Codefresh account. This means that all the new users added to that account will automatically use the selected IdP for signin.

You can also select if needed, a different SSO provider for specific users.

title: "Auth0 SSO via OIDC"

description: "Set up Auth0 SSO for OIDC"

redirect_from:

- /docs/enterprise/sso-auth0/

- /docs/enterprise/single-sign-on/sso-auth0/

- /docs/administration/single-sign-on/sso-auth0/

toc: true

Set up SSO for Auth0 using OIDC.

Set up OIDC SSO for Auth0 in Codefresh by:

1. Creating an Auth0 application in Auth0

You have completed SSO setup for Auth0 in Codefresh.

title: "Azure SSO via OIDC"

description: "Set up Azure SSO for OIDC"

redirect_from:

- /docs/enterprise/single-sign-on/sso-azure/

toc: true

Set up SSO for Azure using OIDC.

Set up OIDC SSO for Azure in Codefresh by:

1. Registering the Codefresh application in Azure

title: "Google SSO via OIDC"

description: "Set up Google SSO for OIDC"

redirect_from:

- /docs/enterprise/sso-google/

- /docs/enterprise/single-sign-on/sso-google/

- /docs/administration/single-sign-on/sso-google/

toc: true

Set up SSO for Google using OIDC.

Set up OIDC SSO for Google in Codefresh by:

1. Creating the client secret in Google

* From the **Application type** drop-down, select **Web application**.

* Enter a **Name** for your integration (user-defined).

* For **Authorized JavaScript origins**, **URIs**, enter, `https://g.codefresh.io`.

{% include image.html

lightbox="true"

max-width="70%"

%}

{% include image.html

lightbox="true"

max-width="70%"

%}

{:start="5"}

1. Continue with [Step 2: Configure team synchronization settings in Google](#step-2-configure-team-synchronization-settings-in-google).

When you configure SSO settings for Google OIDC in Codefresh, you can sync teams through a:

OR

For both sync methods, you must configure settings in Google.

url="/images/sso/google/serviceAccount2.png"

alt="Creating a service account in Google"

caption="Creating a service account in Google"

%}

{:start=2"}

url="/images/sso/google/serviceAccount3.png"

alt="Creating a JSON key"

caption="Creating a JSON key"

%}

{:start="4"}

%}

{:start="5"}

%}

{:start="6"}

url="/images/sso/google/sso-codefresh-settings.png"

alt="SSO settings for Google in Codefresh"

caption="SSO settings for Google in Codefresh"

%}

{:start="4"}

url="/images/sso/google/googleSSO3.png"

alt="Redirect URI"

caption="Redirect URI"

%}