{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-products/wallet/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Single sign-on","description":"User guides, API reference, and support resources.","siteUrl":"https://docs.ripple.com/products/custody","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"single-sign-on","__idx":0},"children":["Single sign-on"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Wallet-as-a-Service (Palisade) supports Single Sign-On (SSO) using a third-party login."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["SSO allows organization employees to use their existing third-party platform login details (for example, via Google, Okta, PingFederate etc.) to login to Wallet-as-a-Service (Palisade), rather than a separate Wallet-as-a-Service (Palisade)-specific username and password. This can greatly simplify the login process for customers."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"when-to-use-sso-with-wallet-as-a-service-palisade","__idx":1},"children":["When to use SSO with Wallet-as-a-Service (Palisade):"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You are confident in your existing security posture and SSO configuration"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You want to keep sign-in controls consistent across your organization"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"when-not-to-use-sso-with-wallet-as-a-service-palisade","__idx":2},"children":["When NOT to use SSO with Wallet-as-a-Service (Palisade):"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You want to segregate both authentication and authorization from your organization's single sign-on"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You are not confident that your organization's SSO controls are strong enough to also protect your access to Wallet-as-a-Service (Palisade)"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Important:"]}," Once you switch to using SSO with Wallet-as-a-Service (Palisade), it is your responsibility to secure your SSO access and ensure you have adequate governance controls in place that prevent unauthorized access to Wallet-as-a-Service (Palisade)."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"configure-sso-for-your-organization","__idx":3},"children":["Configure SSO for your organization"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Prerequisites"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You must have administrator access (or equivalent) on your existing authentication platform, and administrator access in Wallet-as-a-Service (Palisade) to carry out the following steps."]}]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to the ‘Settings’ section of the Wallet-as-a-Service (Palisade) console and click on ‘Security’"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Username/password will be displayed as the default authentication method. Click ‘Add new method’."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ‘Create connection’ --> ‘Get Started’ and then select your third-party platform"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Follow the setup wizard to connect your SSO platform to Wallet-as-a-Service (Palisade)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Once complete, the new authentication method will be displayed in the ‘authentication methods’ table."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Important"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Set the new authentication method to be the default method by clicking on the three dots in the ‘actions’ column. This is very important as once a user has been invited to Wallet-as-a-Service (Palisade), it is not possible to change the authentication method they use."]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":6},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Invite users as normal to Wallet-as-a-Service (Palisade) using their existing SSO email address"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The user can then accept their invite as normal and login to Wallet-as-a-Service (Palisade) by clicking ‘Continue with SSO’"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"https://files.readme.io/1f89f4db6fa4f0a9e6a0ad5b3c6419978238f768e8418779a93abbcdca80ee20-856ad18c0c18d8e09f161fd2d6782fb5a3acc9d32885859975a04ac48f47a587-image.png","alt":"SSO login screen"},"children":[]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If you would like the authentication method to vary depending on which user you are inviting to Wallet-as-a-Service (Palisade), simply change the default authentication method to your desired method before sending the invite."]}]},"headings":[{"value":"Single sign-on","id":"single-sign-on","depth":1},{"value":"When to use SSO with Wallet-as-a-Service (Palisade):","id":"when-to-use-sso-with-wallet-as-a-service-palisade","depth":3},{"value":"When NOT to use SSO with Wallet-as-a-Service (Palisade):","id":"when-not-to-use-sso-with-wallet-as-a-service-palisade","depth":3},{"value":"Configure SSO for your organization","id":"configure-sso-for-your-organization","depth":2}],"frontmatter":{"title":"Single sign-on","seo":{"title":"Single sign-on"}},"lastModified":"2026-02-27T16:34:32.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/wallet/user-interface/users-and-roles/single-sign-on","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}