# SSO configurations ## Create SSO configuration - [POST /resources/sso/v1/configurations](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssoconfigurationcontrollerv1_createssoconfiguration.md): Create a new Single Sign-On (SSO) configuration for the specified account (tenant). ## Get SSO configurations - [GET /resources/sso/v1/configurations](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssoconfigurationcontrollerv1_getssoconfigurations.md): Retrieve Single Sign-On (SSO) configurations for the specified account (tenant). ## Delete SSO configuration - [DELETE /resources/sso/v1/configurations/{configurationId}](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssoconfigurationcontrollerv1_deletessoconfiguration.md): Delete Single Sign-On (SSO) configurations for the specified account (tenant). ## Update SSO configuration - [PATCH /resources/sso/v1/configurations/{configurationId}](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssoconfigurationcontrollerv1_updatessoconfiguration.md): Update SSO configuration ## Create SSO configuration using metadata - [POST /resources/sso/v1/configurations/metadata](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssoconfigurationcontrollerv1_createssoconfigurationbymetadata.md): Create a Single Sign-On (SSO) configuration using identity provider metadata for the specified account (tenant). ## Update SSO configuration using metadata - [PUT /resources/sso/v1/configurations/{configurationId}/metadata](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssoconfigurationcontrollerv1_updatessoconfigurationbymetadata.md): Update a Single Sign-On (SSO) configuration using identity provider metadata for the specified account (tenant). ## Create SSO domain - [POST /resources/sso/v1/configurations/{configurationId}/domains](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssodomaincontrollerv1_createssodomain.md): Add a domain to a Single Sign-On (SSO) configuration for the specified account (tenant). ## Delete SSO domain - [DELETE /resources/sso/v1/configurations/{configurationId}/domains/{domainId}](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssodomaincontrollerv1_deletessodomain.md): Remove a domain from a Single Sign-On (SSO) configuration for the specified account (tenant). ## Validate SSO domain by email - [PUT /resources/sso/v1/configurations/{configurationId}/domains/{domainId}/validate/email](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssodomaincontrollerv1_validatessodomainbyemail.md): Validate a domain in a Single Sign-On (SSO) configuration using the user's email domain. ## Validate SSO domain - [PUT /resources/sso/v2/configurations/{configurationId}/domains/{domainId}/validate](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssodomaincontrollerv2_validatessodomain.md): Validate a domain in a Single Sign-On (SSO) configuration for the specified account (tenant). ## Set SSO default roles - [PUT /resources/sso/v1/configurations/{configurationId}/roles](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssorolescontrollerv1_setssodefaultroles.md): Set default roles assigned to users authenticated through Single Sign-On (SSO) for the specified account (tenant). ## Get SSO default roles - [GET /resources/sso/v1/configurations/{configurationId}/roles](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssorolescontrollerv1_getssodefaultroles.md): Retrieve default roles assigned to users authenticated through Single Sign-On (SSO) for the specified account (tenant). ## Create an SSO group - [POST /resources/sso/v1/configurations/{configurationId}/groups](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssogroupscontrollerv1_createssogroup.md): Create a new SSO group for user management and access control within the specified SSO configuration for the account (tenant). ## Get SSO group - [GET /resources/sso/v1/configurations/{configurationId}/groups](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssogroupscontrollerv1_getssogroup.md): Retrieve an SSO group from the specified SSO configuration for the account (tenant). ## Update SSO group - [PATCH /resources/sso/v1/configurations/{configurationId}/groups/{groupId}](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssogroupscontrollerv1_updatessogroup.md): Update an existing SSO group within the specified SSO configuration for the account (tenant). ## Delete SSO group - [DELETE /resources/sso/v1/configurations/{configurationId}/groups/{groupId}](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssogroupscontrollerv1_deletessogroup.md): Delete an existing SSO group from the specified SSO configuration for the account (tenant). ## Create or update SSO domains configuration - [PUT /resources/sso/v1/configurations/domains](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssodomainsconfigurationcontrollerv1_createorupdatessodomainsconfiguration.md): Create or update the SSO domains configuration for the account (tenant). ## Get SSO domains configuration - [GET /resources/sso/v1/configurations/domains](https://developers.frontegg.com/ciam/api/sso/sso-configurations/ssodomainsconfigurationcontrollerv1_getssodomainsconfiguration.md): Retrieve the SSO domains configuration for the account (tenant).