# Single Sign on

Use the SSO feature with your Identity Provider to enable your TD account users to use a single ID to log into more than one Treasure Data account.

A federated identity is defined as a person's electronic identity and attributes, stored in one identity management system and used to validate access to multiple systems. In Treasure Data, the federated identity is used to securely access TD Console. Treasure Data ensures your account information stays secure by allowing you to move across systems seamlessly using identity federation. Plus, you can restrict access to specific Treasure Data accounts with the help of IP allowlists.

## SSO Settings

Each TD account has a unique set of data and a set of users associated with the account.

For example, you might have three Treasure Data accounts, such as a developer account, a test account, and a production account. You may choose to use multiple federated IDs or only one ID and password for all TD accounts but you also want to ensure that your login policies are adhered to. Your IdP enforces secure access policies for user authentication. You define your users in the IdP and define Treasure Data as an authorized target application.

Although you have the option to configure multiple Identity Provider (IdP) to authenticate your Treasure Data users and control the sign-in policy for your users, one IdP is primary.

* Contact your Customer Success Representative to enable Multiple IdP.
* After SSO Settings are enabled in your Treasure Data Account, the Google SSO login method will be disabled.


![](/assets/idp.21463a128a07a18261eff9510af57fd7eb14c12683dde0309ad1b947059ad899.f0cddcd7.png)

SSO provides heightened security and tighter authentication for both on-premise and cloud applications. You can centrally manage all users and their respective permissions through your corporate directory service.

SSO supports IdPs using SAML 2.0 protocol, such as Azure Active Directory.

Contact your Customer Success representative if you are interested in enabling the SSO feature on your account.

## Next Steps

Continue to the following topics:

* [Managing the Sign-In Mode of an SSO User](/products/control-panel/security/users/managing-the-sign-in-mode-of-an-sso-user)
* [Signing in as an SSO User](/products/control-panel/security/sign-in-settings/signing-in-as-an-sso-user)
* [Action Required When SSO Users are Removed](/products/control-panel/security/sign-in-settings/action-required-when-sso-users-are-removed)
* [Single Sign-On (SSO) Configuration Overview](/products/control-panel/security/sign-in-settings/single-sign-on-configuration-overview)
* [REST API for SSO](https://api-docs.treasuredata.com/en/api/system-api/identity_federation/)