> ## Documentation Index
> Fetch the complete documentation index at: https://help.studystash.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up single sign-on

> Submit your SAML metadata, let StudyStash finish setup and test your institution’s sign-in.

You need access to the [Admin Dashboard](https://studystash.com/admin), permission to manage integrations and access to your institution’s identity provider. SSO is shared across your organisation’s campuses.

If these options are not available, [ask the StudyStash team to arrange setup](https://internal.support.studystash.com/servicedesk/customer/portal/34/create/158).

## 1. Open SSO setup

Open **Integrations → Single Sign-On (SSO)**. Select **Configure SSO** if this is your first connection, or open the existing connection.

Under **Connection method**, choose **Microsoft Entra** for a metadata URL, or **XML file** for a SAML metadata file from another provider.

StudyStash SSO setup with connection method cards, copyable SAML settings and the metadata importer.

SSO connection setup

## 2. Configure your identity provider

Copy the **Entity ID (Audience URI)** and **Reply URL (ACS URL)** from **SAML settings** into your provider’s SAML application. Use the values on your page, not values copied from a screenshot.

For Microsoft, follow [Set up Microsoft Entra ID](https://help.studystash.com/integrations/microsoft-entra-id.md). For another provider, check the claims below and give your intended users access to the application.

> [accordion] SAML attributes and claims
>
> Use the institution email address as the NameID and email claim. Metadata import does not configure these claims in your identity provider.
>
> <table aria-label="Single sign on settings" role="table">
>   <thead role="rowgroup">
>     <tr role="row" />
>   </thead>
>
>   <tbody role="rowgroup" />
> </table>
>
> Optional name claims:
>
> <table aria-label="Single sign on settings" role="table">
>   <thead role="rowgroup">
>     <tr role="row" />
>   </thead>
>
>   <tbody role="rowgroup" />
> </table>

## 3. Import and submit your metadata

In **Identity provider details**, paste the Entra **App Federation Metadata URL** and select **Import metadata**, or upload your provider’s XML file.

Review the imported details, then select **Send for setup**. For an existing connection, select **Save changes**. Importing alone does not save anything.

**Awaiting StudyStash** means we have received your metadata and need to finish setup. Testing becomes available once this is complete.

## 4. Test your connection

To confirm SSO is working, select **Test connection**. StudyStash will watch for a successful sign-in through this connection. Complete sign-in in the new tab using an institution account that has access to the application.

To ask someone else to test, select **Copy test link** and share it with your IT contact. If a new tab does not open, select **Open sign-in**.

StudyStash waiting for a successful SSO sign-in, with options to open sign-in or copy the test link.

Test your institution’s sign-in

The status changes from **Configured** to **Connected** after StudyStash confirms successful access. Configured means the settings are complete; it does not confirm a successful sign-in.

Test attempts expire within 10 minutes. If yours expires, select **Test connection** to start again.

## Email domains

Use the **Email domains** tab to review and manage the institution email domains used for sign-in. This does not replace assigning users in your identity provider. For a pilot, review [access scope](https://help.studystash.com/administrators/pilot-sso-scope.md).

## If the test does not complete

Check that the account is assigned to the application and has the required email claim. If you still need help, [contact support](https://help.studystash.com/support.md) with the error and the time it happened. Do not send passwords.

> [accordion] Update an existing connection
>
> Reimport a metadata URL or XML file, or select **Edit individual fields** to change the Entity ID, sign-in URL or signing certificate. Review and select **Save changes**, wait for StudyStash to finish setup, then test again. Importing a metadata URL is a one-time import; certificate changes need a new import and save.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.