# Configuring Authentication for TD Using the TD Toolbelt

After you’ve installed the TD Toolbelt, you’ll have access to the `td` command from your command line. Next, you need to set up the credentials for your account.

There are three ways to sign up:

* [Password-Based Authentication](/tools/cli-and-sdks/configuring-authentication-for-td-using-the-td-toolbelt#password-based-authentication)
* [Setting Up Google SSO Users](/tools/cli-and-sdks/configuring-authentication-for-td-using-the-td-toolbelt#setting-up-google-sso-users)
* [Setting Up Identify Federation Users](/tools/cli-and-sdks/configuring-authentication-for-td-using-the-td-toolbelt#setting-up-identify-federation-users)


Regardless of how you are signed up, the TD Toolbelt requires your TD API key to authorize its requests. The information is saved in the `~/.td/td.conf` file for future use.

## Password-Based Authentication

You can set up the account credentials with the `td account` command. Use the username and password that you used when you signed up:


```bash
$ td -e https://api.treasuredata.com account -f
```


```
Email: user@domain.com
Password (typing will be hidden):
        
Authenticated successfully.
```

The endpoint you use will differ depending on your region. If your account does not belong to the US region, you need to [change endpoint in the command](https://api-docs.treasuredata.com/en/overview/aboutendpoints/#treasure-data-api-baseurls).

This command will create or update the `~/.td/td.conf` file with your master API key.

## Setting Up Google SSO Users

1. Obtain your API key from the [TD Console](https://console.treasuredata.com/app/users/current).
2. You need to set up an endpoint, use the  *td server:endpoint* [command](https://api-docs.treasuredata.com/en/tools/cli/api/#td).


The endpoint you use will differ depending on your region. If your account does not belong to the US region, you need to [change endpoint in the command](https://api-docs.treasuredata.com/en/overview/aboutendpoints/#treasure-data-api-baseurls).

1. Use `td apikey:set <your api-key>` to creates or updates the ~/.td/td.conf file with the provided API key:



```bash
$ td apikey:set <your_apikey>
```


```bash
API key is set.
Use 'td db:create <db_name>' to create a database.
```

1. If you are switching accounts, add an `-f `after the api-key to force a switch:



```bash
$ td apikey:set <your_apikey> -f
```


```bash
API key is set.
Use 'td db:create <db_name>' to create a database.
```

## Setting Up Identify Federation Users

You can set up your API by following the [Setting Up Google SSO Users](/tools/cli-and-sdks/configuring-authentication-for-td-using-the-td-toolbelt#setting-up-google-sso-users) procedure.