---
title: "Overview"
sidebarTitle: "Overview"
description: "Configure how your team accesses Cube Cloud using passwords, social logins, or SAML-based single sign-on."
---

 Authentication & SSO

As an account administrator, you can manage how your team and users access Cube Cloud.

You can authenticate using email and password, a GitHub account, or a Google account.
Cube Cloud also provides single sign-on (SSO) via identity providers supporting
[SAML](#saml), e.g., Okta, Google Workspace, Azure AD, etc.

<Info>

[SAML](#saml) is available on [Enterprise plan](https://cube.dev/pricing).

</Info>

<Frame>
  <img src="https://ucarecdn.com/e3b3bce2-117e-4cbc-b516-c71b51b98888/" />
</Frame>

## Configuration

To manage authentication settings, navigate to **Admin → Settings**
of your Cube Cloud account, and switch to the **Authentication & SSO** tab.

Use the toggles in **Password**, **Google**, and **GitHub**
sections to enable or disable these authentication options.

### SAML

Use the toggle in the **SAML** section to enable or disable the authentication
via an identity provider supporting the [SAML protocol][wiki-saml].
Once it's enabled, you'll see the **SAML Settings** section directly below.

Check the following guides to get tool-specific instructions on configuration:

<CardGroup cols={2}>
  <Card title="Google Workspace" img="https://static.cube.dev/icons/google-cloud.svg" href="/admin/sso/google-workspace">
  </Card>
  <Card title="Microsoft Entra ID" img="https://static.cube.dev/icons/azure.svg" href="/admin/sso/microsoft-entra-id">
  </Card>
  <Card title="Okta" img="https://static.cube.dev/icons/okta.svg" href="/admin/sso/okta">
  </Card>
</CardGroup>

[wiki-saml]: https://en.wikipedia.org/wiki/SAML_2.0
[ref-apis]: /reference
[ref-dap]: /docs/data-modeling/data-access-policies
[ref-security-context]: /docs/data-modeling/access-control/context
[ref-auth-integration]: /docs/data-modeling/access-control#authentication-integration