# SSO Authentication

You can set up Single Sign-On Authentication for a Kloudfuse Cluster. Each provider will have specific steps that you will follow. Please reference the links below for the Provider you want to integrate with.

- [SAML SSO Authentication](https://docs.kloudfuse.com/platform/4.0.2/administration/authentication/sso-saml/)
- [Google OAuth2 SSO Authentication](https://docs.kloudfuse.com/platform/4.0.2/administration/authentication/sso-google/)
- [Okta SSO Authentication](https://docs.kloudfuse.com/platform/4.0.2/administration/authentication/sso-okta/)
- [JumpCloud SSO Authentication](https://docs.kloudfuse.com/platform/4.0.2/administration/authentication/sso-jumpcloud/)
- [Disable Local Login](https://docs.kloudfuse.com/platform/4.0.2/administration/authentication/sso-only/)

## Customize the sign-in page

The sign-in page of your Kloudfuse cluster has the following default configuration in the `extraArgs` section of the `custom-values.yaml` file:

```yaml
     extraArgs:
       # provider-display-name: default based on provider used
       footer: "-"   # No footer
       custom-sign-in-logo: "-"    # No Logo
```

To customize the sign-in page for your Kloudfuse cluster, follow these steps:

1. Edit the `extraArgs` section of the `custom-values.yaml` file with your customizations.

See the [OAuth2 Proxy](https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview#environment-variables) documentation for available options.

```yaml
    kfuse-auth:
      oauth2-proxy:
        config:
          ...
        extraArgs:
          provider-display-name: "Customer Provider"
          custom-sign-in-logo: "https://framerusercontent.com/images/1JKfsQjCthSQEaxzteDKpRprZM.png"
```

```console
helm upgrade --install kfuse oci://us-east1-docker.pkg.dev/mvp-demo-301906/kfuse-helm/kfuse \
  -n kfuse \
  --version <VERSION> \ (1)
  -f custom-values.yaml
```

|     |     |
| --- | --- |
| **1** | Replace `<VERSION>` with a valid Kloudfuse release value. See [Release Notes](https://docs.kloudfuse.com/platform/4.0.2/whats-new/release-notes/) for the latest release.<br>1. Restart the `kfuse-auth` deployment to apply the changes. For example, the customizations in [Step 1](https://docs.kloudfuse.com/platform/4.0.2/setup/install/sso-user-auth/#step1) update the banner as shown below. |