# SSO settings ## Get service provider metadata - [GET /resources/sso/v1/saml/configurations/sp-metadata](https://developers.frontegg.com/ciam/api/sso/sso-settings/samlcontrollerv1_getspmetadata.md): Retrieve the service provider metadata for a specific account (tenant). ## Exclude email from SSO - [POST /resources/sso/v1/configurations/excluded-emails](https://developers.frontegg.com/ciam/api/sso/sso-settings/excludeemailsfromssov1_excludessoemail.md): Exclude an email address from SSO enforcement. Provide the email address to exclude in the request body. ## Get SSO excluded emails - [GET /resources/sso/v1/configurations/excluded-emails](https://developers.frontegg.com/ciam/api/sso/sso-settings/excludeemailsfromssov1_getssoexcludedemails.md): Retrieve the list of email addresses excluded from SSO enforcement. ## Delete SSO excluded email - [DELETE /resources/sso/v1/configurations/excluded-emails/{email}](https://developers.frontegg.com/ciam/api/sso/sso-settings/excludeemailsfromssov1_deletessoexcludedemail.md): Remove an email address from the list of SSO-excluded emails. ## Vendor only - Force SSO domain validation - [PUT /resources/sso/v1/configurations/domains/{domain}/force-validate](https://developers.frontegg.com/ciam/api/sso/sso-settings/vendoronlyssoconfigurationcontrollerv1_forcessodomainvalidation.md): Force domain validation for SSO configuration in the environment. ## Get SSO per account (tenant) configuration - [GET /resources/sso/v1/configurations/multiple-sso-per-domain](https://developers.frontegg.com/ciam/api/sso/sso-settings/ssopertenantcontrollerv1_getssopertenantconfig.md): Retrieve the SSO configuration for a specific account (tenant). ## Create or update SSO per account (tenant) configuration - [PUT /resources/sso/v1/configurations/multiple-sso-per-domain](https://developers.frontegg.com/ciam/api/sso/sso-settings/ssopertenantcontrollerv1_createorupdatessopertenantconfig.md): Create or update the SSO configuration for a specific account (tenant). ## Configure OIDC - [POST /resources/sso/v1/oidc/configurations](https://developers.frontegg.com/ciam/api/sso/sso-settings/oidccontrollerv1_configureoidc.md): Configure or update an OpenID Connect (OIDC) identity provider for the environment.