Prior to setting up SSO on Grid, follow the steps below to configure SSO on your Identity Provider platform (such as Keycloak, ADFS, Auth0 etc.) :

Download the SP Metadata
- Click the "Download Metadata" icon located at the top right of the "Enable single sign-on" window.
- Save the metadata file (typically in XML format) to your file system.
Import Metadata into the Identity Provider (IdP)
- Log in to the admin console of your chosen identity provider platform.
- Navigate to the section for configuring SAML applications or clients (e.g., "Enterprise Applications" or "SAML Configuration").
- Use the option to "Import SP Metadata" and upload the metadata file downloaded from the previous step.
- The IdP will typically create the SAML client automatically based on the metadata file.
Complete the SAML Client Configuration
- Once the client is created, review the configuration to ensure all details are correct :
  - Entity ID and SSO URL should match the values from the SP metadata.
  - Upload the Signing Certificate from the SP metadata if it isn't automatically added.
- Configure the NameID format to use emailAddress.
- Ensure the NameID value is mapped to the user's email address in the IdP. For example, in some platforms, this might be an attribute like user.email or EmailAddress.

What is Single Sign-On (SSO) feature on Grid?