<@ULVA73B9P> How do i use SSO on my prefect which ...
# ask-marvin
t
@Marvin How do i use SSO on my prefect which is hosted on a Virtual Machine?
m
Could you please specify the version of Prefect you are using? Prefect 2.x and 3.x have different configurations and documentation, and knowing the version will help me provide a more accurate answer.
t
Prefect 3
@Marvin Prefect 3
m
For setting up Single Sign-On (SSO) with Prefect 3.x, your environment must be integrated with Prefect Cloud through one of its enterprise plans. Here's a brief overview of how you can configure SSO: 1. Identity Provider (IdP) Integration: Prefect Cloud's Enterprise plans support SSO integration with identity providers that use OIDC or SAML 2.0. 2. Setup Process: - Navigate to the SSO page within your Prefect Cloud account to enable SSO for your users. - If not already done, you'll need to specify and save the email domains where SSO should be enabled. 3. Authentication Flow: Once SSO is configured, users will authenticate using your configured IdP, and Prefect Cloud will not store any passwords for these accounts. This means the users in your Prefect Cloud account will rely on your IdP for logging in. 4. Access Management: Non-admin users are required to authenticate via SSO, ensuring secure access management within your team. Please note that these features are specific to Prefect Cloud's Enterprise plans. If your Prefect setup on the virtual machine does not connect to Prefect Cloud, local SSO setup might involve different steps and infrastructure dependencies. For detailed setup instructions including IdP-specific configurations, refer to Prefect's official documentation on configuring SSO. If you're operating in a self-hosted environment, additional network and application configurations might be necessary, typically tailored to the specific requirements of your VM and IdP.