> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/administration/setup-sso-integration-on-prisma-cloud/get-started-with-oidc-sso.md).
# Get Started with OIDC SSO
Prisma Cloud offers a Service Provider (SP) initiated SSO capability. Leveraging OpenID Connect [(OIDC)](https://openid.net/developers/how-connect-works/), this option enables Prisma Cloud System Administrators to allow users to sign in to Prisma Cloud with their Identity Provider (IdP) credentials using the **Sign in with OIDC SSO** option on the login page. Learn more about setting up SP-initiated SSO below.
To avoid account lockout while making configuration changes, enable administrative users to log into the console with both local authentication credentials on Prisma Cloud and SSO access by adding them to the SSO bypass list.
The Sign in via SSO button enables login with a configured OIDC SSO provider. To sign in using third party Security Assertion Markup Language (SAML) SSO, use the Identity Provider defined for the SAML integration with the Prisma Cloud tenant.
Complete the steps below on the Prisma Cloud console and your IdP to set up OIDC:
1. Log in to Prisma Cloud using an account with System Administrator privileges to configure SSO and redirect login requests to the IdP’s login page.
2. Complete the following steps on your Prisma Cloud tenant:
1. Select **Access Control > SSO** and select **OIDC** as shown below.
2. Copy the **Audience URI** value. This is a read-only field in the format that uniquely identifies your instance of Prisma Cloud. This value is required to configure OIDC on your IdP.
tt:\[NOTE:] The Prisma ID of a tenant is displayed adjacent the OIDC configuration so that it can be shared with users that may have access to multiple tenants. If you have access to multiple tenants on a stack you will be required to enter the Prisma ID of the tenant you are logging into.
3. Complete the setup on the IdP.
1. Review the workflow for your IdP.
* [Okta](/content-collections/administration/setup-sso-integration-on-prisma-cloud/get-started-with-oidc-sso/set-up-oidc-on-okta.md)
* [Azure AD](/content-collections/administration/setup-sso-integration-on-prisma-cloud/get-started-with-oidc-sso/set-up-oidc-on-azure.md)
4. Add the **Callback URI** previously created on Prisma Cloud to the IdP.
Use your pre-defined Access URL for login, alternatively use your [federated login URL](/content-collections/get-started/access-prisma-cloud.md#id3c964e17-24c6-4e7c-9a47-adae096cc88d).
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.prismacloud.io/content-collections/administration/setup-sso-integration-on-prisma-cloud/get-started-with-oidc-sso.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.