From 6ffcd484ed611e8f7738cf1470c722402eba416f Mon Sep 17 00:00:00 2001 From: Alex Gold Date: Fri, 27 Feb 2026 12:27:37 -0500 Subject: [PATCH] Update SSO instructions --- .../pages/collaborate/enterprise/sso.md | 30 ++++++++++++------- 1 file changed, 19 insertions(+), 11 deletions(-) diff --git a/packages/kilo-docs/pages/collaborate/enterprise/sso.md b/packages/kilo-docs/pages/collaborate/enterprise/sso.md index 8f25b843aed..7c71b7b6755 100644 --- a/packages/kilo-docs/pages/collaborate/enterprise/sso.md +++ b/packages/kilo-docs/pages/collaborate/enterprise/sso.md @@ -11,13 +11,6 @@ Kilo Enterprise lets your organization securely manage access using **Single Sig **IDP-initiated logins are not currently supported.** Users must navigate to the [Kilo Web App](https://app.kilo.ai) to log in. Logging in directly from your identity provider's dashboard is not supported at this time. {% /callout %} -## Why Enable SSO? - -- **Centralized access control:** Manage permissions through your existing identity provider. -- **Faster onboarding:** New team members automatically gain access when added to your company directory. -- **Improved security:** Enforce company-wide password, MFA, and session policies. -- **Easy offboarding:** Smoothly remove access when users leave your organization. - ## Prerequisites You’ll need: @@ -25,7 +18,7 @@ You’ll need: - Admin or Owner permissions for your Kilo organization. - Access to your **Identity Provider (IdP)** (e.g. Okta, Google Workspace, Azure AD). -## Step-by-Step Setup +## Initiating SSO Configuration ### 1. Open [Organization](https://app.kilo.ai/organizations) Dashboard @@ -36,10 +29,25 @@ Find the Single Sign-On (SSO) Configuration panel, and click "Set up SSO": Fill in your contact information and someone from our team will reach out soon to help you configure SSO. -## ✅ Next Steps +## Implementing SSO Configuration + +Once the Kilo team has enabled SSO for your organization, your named admin will get an email from WorkOS to configure SSO. + +{% callout type="warning" %} +**Save domain policy for last.** + +If you configure domain policy before setting up SSO, you may lock users out of Kilo. +{% /callout %} + +Your admin will need to use the WorkOS link to: + +1. Configure your Identity Provider Configuration in WorkOS. +2. Copy the Service Provider details (Entity ID, ACS URL, and Metadata) from the WorkOS dashboard and apply them in your Identity Provider. +3. Set the organization policy and user provisioning settings according to your organization's needs. +4. Configure domain policy and domain verification in WorkOS. After enabling SSO: - Invite new users with their company email domain. -- Manage team access and roles from the **[Organization](/docs/collaborate/adoption-dashboard/overview)** tab. -- View user activity across the team in the **[Audit Logs](/docs/collaborate/enterprise/audit-logs)** tab +- Manage team access and roles from the **[Organization](/docs/plans/dashboard)** tab. +- View user activity across the team in the **[Audit Logs](/docs/plans/enterprise/audit-logs)** tab \ No newline at end of file