For AI agents: The documentation index is at https://docs.digitalocean.com/llms.txt. Markdown versions of pages use the same URL with index.html.md in place of the HTML page (for example, append index.html.md to the directory path instead of opening the HTML document).

Single sign-on (SSO) is an authentication service that lets users access multiple applications by signing in once with a single set of credentials. An identity provider (IdP) is an authentication service that manages user identities for applications.

When a logged-out user tries to access an SSO-enabled app, the app redirects the user to the IdP to authenticate. Using a secure protocol, like SAML or OpenID Connect (OIDC), the app sends the user’s credentials to the IdP which then verifies the user’s identity.

SSO on DigitalOcean supports OIDC-compatible IdPs, like Okta and Microsoft Entra ID. You can optionally map roles from your IdP with a team_role claim, or assign a default role when users first join through SSO.

How to Configure Single Sign-On for Teams

Enable single sign-on (SSO) to let team members sign in to DigitalOcean with a single set of credentials from an OIDC-compatible identity provider (IdP), like Okta or Microsoft Entra ID.

When you have SSO enabled on a team, you can view SSO activity on the SSO activity page.