> ## Documentation Index
> Fetch the complete documentation index at: https://docs.humanintelligence.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO & Directory Sync

> IT Admin setup guide for Single Sign-On and automated user provisioning.

This guide walks IT Admins through setting up Single Sign-On (SSO) and Directory Sync for your organization. Once configured, your identity provider handles authentication and automatically provisions users into the right system roles.

Because SSO isn't active for your domain yet, your very first login uses a secure one-time email verification code. Once you're in, you configure the corporate authentication paths for the rest of your organization.

## Step 1: Initial sign-in & bootstrapping

Before you can configure SSO, you need to access the platform.

<Steps>
  <Step title="Receive your invitation">
    You'll receive an invitation email from Human Intelligence. Click **Open Human Intelligence** to begin.
  </Step>

  <Step title="Confirm your email">
    You'll be directed to an "Accept invitation" landing page. Confirm your IT administrator email address and click **Continue**.
  </Step>

  <Step title="Enter your verification code">
    The portal will prompt you for a 6-digit verification code. Check your inbox for a "Sign in to Human Intelligence" email containing your one-time code, and enter it to complete your initial authentication.
  </Step>
</Steps>

## Step 2: Configure Single Sign-On (SSO)

Once signed in, you'll be directed to the main Human Intelligence organization dashboard.

<Steps>
  <Step title="Open the Single Sign-On tile">
    From the home page, look under the **Legal & Security** section and click the **Single Sign-On** tile.
  </Step>

  <Step title="Launch the setup portal">
    On the Single Sign-On configuration screen, click **Open SSO Setup**. A secure Admin Portal opens in a new tab.
  </Step>

  <Step title="Connect your identity provider">
    Select your organization's Identity Provider (e.g., Okta SAML, Entra ID, Google SAML) and follow the step-by-step instructions in the portal to complete the SAML integration.
  </Step>
</Steps>

## Step 3: Configure Directory Sync

After completing the SSO wizard, return to the main dashboard to automate user provisioning and role management.

<Steps>
  <Step title="Open the Directory Sync tile">
    Navigate back to [app.humanintelligence.com](https://app.humanintelligence.com) and click the **Directory Sync** tile under the **Legal & Security** section.
  </Step>

  <Step title="Launch the provisioning wizard">
    Click **Open Directory Sync Setup** to launch the provisioning wizard in a new tab.
  </Step>

  <Step title="Connect your directory provider">
    Follow the onscreen workflow to connect your directory provider and authorize synchronization.
  </Step>
</Steps>

## Step 4: Directory group mapping & roles

To ensure correct access controls from day one, create **two specific directory groups** within your Identity Provider. These groups pass attributes during sync to map users directly to Human Intelligence system roles.

| Directory group name | Target system role | Best practice assignment                                                                                                         |
| -------------------- | ------------------ | -------------------------------------------------------------------------------------------------------------------------------- |
| **Platform Admin**   | Platform Admin     | **Assign yourself (IT Admin) here.** This role manages connections, security infrastructure, and platform configuration.         |
| **Data Admin**       | Data Admin         | **Assign to HR & People Leaders leading this project.** This role grants full query access to organizational and people metrics. |

Everyone else synced from your directory joins as a **Member** — they explore metrics and query data limited to the data roles assigned to them in the application.

<Info>
  For a detailed breakdown of the permissions associated with these system roles, see [Access Control](/governance/access-control#system-roles).
</Info>