{$t('upgrade.enterprise_required')} {#if ssoStore.isLoading && !ssoStore.isInitialized}

{:else if ssoStore.config?.config} SSO Connection Manage your SSO connection status

{ssoStore.config.config.displayName}

{getProviderLabel(ssoStore.config.config.provider)} • {ssoStore.config.config.domain}

{ssoStore.config.config.isActive ? 'Active' : 'Inactive'}

{#if !ssoStore.config.config.isActive} {/if}

{#if ssoStore.config.config.isActive}

Callback URL:

Copy this URL to your IdP's callback/redirect URL configuration.

{/if} Access Policies Configure how users access your organization

Force SSO Require all users to sign in via SSO. Email/password login will be disabled.

Auto-join Allow users with matching email domains to automatically join your organization.

Break-glass Access Allow admins to bypass SSO with email/password in case of emergency.

{:else} Setup SSO Configure Single Sign-On for your organization. This feature requires an Enterprise plan. Provider

{getProviderLabel(provider)}

Okta Google Workspace Auth0 Display Name {#if ssoApi.errors.displayName} {ssoApi.errors.displayName} {/if} Issuer URL {#if ssoApi.errors.issuer} {ssoApi.errors.issuer} {/if} Email Domain {#if ssoApi.errors.domain} {ssoApi.errors.domain} {/if} Client ID {#if ssoApi.errors.clientId} {ssoApi.errors.clientId} {/if} Client Secret {#if ssoApi.errors.clientSecret} {ssoApi.errors.clientSecret} {/if} {/if}