--- title: "Enable Single Sign-On (SSO)" slug: "enable-sso" description: "Enable SSO in R365. All users must have unique email addresses first. Enabling SSO does not change the login experience until a provider is connected." updated: 2026-01-12T08:00:08Z published: 2026-01-12T08:00:08Z canonical: "docs.restaurant365.com/enable-sso" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.restaurant365.com/llms.txt > Use this file to discover all available pages before exploring further. # Enable Single Sign-On (SSO) Single Sign-On (SSO) must be enabled before a connection with an SSO provider can be configured. Single Sign-On is enabled from the [Single Sign-On page](/doc/docs/single-sign-on-page). Before SSO can be enabled, all R365 users must have unique email addresses. If duplicate email addresses are found, the users are listed for [review and resolution](/doc/docs/enable-single-sign-on-wizard). Once SSO is enabled, unique email addresses are permanently enforced. Enabling SSO does not change the user login experience until a connection with an SSO provider is successfully configured. Learn more about connecting to [Okta](/doc/docs/okta-sso-integration) or [Microsoft Entra (Azure)](/doc/docs/microsoft-entra). --- ## Security Users must have the following permission to enable SSO: - Administration → Single Sign-On (SSO) → Create/Edit Single Sign-On These permissions can be added to [custom user roles](https://restaurant365.us.document360.io/doc/docs/custom-user-roles) or [individual users](https://restaurant365.us.document360.io/doc/docs/users-overview-and-security). The [Permission Access report](https://restaurant365.us.document360.io/doc/docs/generating-a-permissions-access-report) can be used to determine which user roles or users already have these permissions assigned. For more information, see [User Setup and Security](/doc/docs/user-setup-security-and-location-access). --- ## Enable Single Sign-On To enable single sign-on, follow these steps: *Click steps to expand for additional information and images.* ****1) Navigate** to the [Single Sign-On (SSO)](/doc/docs/single-sign-on-sso-1) page.** ![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-0AESBVXW.png?sv=2026-02-06&spr=https&st=2026-10-29T04%3A04%3A09Z&se=2026-10-29T05%3A04%3A09Z&sr=c&sp=r&sig=18zToo7gGkHtirMcYR4wmvFJ0iEkVYFXnmqC1ZQ81x4%3D) ****2)** Click **Get Started.**** ![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-SHES370N.png?sv=2026-02-06&spr=https&st=2026-10-29T04%3A04%3A09Z&se=2026-10-29T05%3A04%3A09Z&sr=c&sp=r&sig=18zToo7gGkHtirMcYR4wmvFJ0iEkVYFXnmqC1ZQ81x4%3D) If **no duplicate** email addresses are found, Single Sign-On (SSO) is enabled and the [Single Sign-On page opens](/doc/docs/single-sign-on-page). Enabling SSO does not change the user login experience until a connection with an SSO provider is successfully configured. Learn more about connecting to [Okta](/doc/docs/okta-sso-integration) or [Microsoft Entra (Azure)](/doc/docs/microsoft-entra). If **duplicate** email addresses are found, the [SSO Duplicate Email Review screen](/doc/docs/enable-single-sign-on-wizard) opens. Duplicate email addresses must be resolved before SSO can be enabled. Follow these additional steps to resolve duplicate email addresses: ****3)** Click the **full name** of a user whose email address needs to be changed. Their [user record](/doc/docs/user-record-general-tab) will open.** ![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-ZHLE5CS6.png?sv=2026-02-06&spr=https&st=2026-10-29T04%3A04%3A09Z&se=2026-10-29T05%3A04%3A09Z&sr=c&sp=r&sig=18zToo7gGkHtirMcYR4wmvFJ0iEkVYFXnmqC1ZQ81x4%3D) ****4)** Enter a **unique email address** for the user.** ![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-M13L534U.png?sv=2026-02-06&spr=https&st=2026-10-29T04%3A04%3A09Z&se=2026-10-29T05%3A04%3A09Z&sr=c&sp=r&sig=18zToo7gGkHtirMcYR4wmvFJ0iEkVYFXnmqC1ZQ81x4%3D) ****5)** Click **Save** on the user record.** ![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-5YGINWCS.png?sv=2026-02-06&spr=https&st=2026-10-29T04%3A04%3A09Z&se=2026-10-29T05%3A04%3A09Z&sr=c&sp=r&sig=18zToo7gGkHtirMcYR4wmvFJ0iEkVYFXnmqC1ZQ81x4%3D) ****6)** Return to the **Single Sign-On page**, then click **Update** to refresh the list.** ![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-U5II25QS.png?sv=2026-02-06&spr=https&st=2026-10-29T04%3A04%3A09Z&se=2026-10-29T05%3A04%3A09Z&sr=c&sp=r&sig=18zToo7gGkHtirMcYR4wmvFJ0iEkVYFXnmqC1ZQ81x4%3D) ****7)** If duplicates remain, **repeat steps 4 - 6** until no duplicate emails are found.** ![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-98AAP4C7.png?sv=2026-02-06&spr=https&st=2026-10-29T04%3A04%3A09Z&se=2026-10-29T05%3A04%3A09Z&sr=c&sp=r&sig=18zToo7gGkHtirMcYR4wmvFJ0iEkVYFXnmqC1ZQ81x4%3D) If **no duplicate** email addresses are found, Single Sign-On (SSO) is enabled and the [Single Sign-On page opens](/doc/docs/single-sign-on-page). > Enabling SSO does not change the user login experience until a connection with an SSO provider is successfully configured. Learn more about connecting to [Okta](/doc/docs/okta-sso-integration) or [Microsoft Entra (Azure)](/doc/docs/microsoft-entra)