> ## Documentation Index
> Fetch the complete documentation index at: https://docs.resolve.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Single Sign On (SSO)

Let users log in with existing company credentials with Single Sign-On (SSO). ResolveAI works with [Google SSO](/google-sso), [Okta](/okta), and [Azure AD](/azure-ad). Users are provisioned automatically the first time they log in.

To sync users and groups from your directory ahead of first login, and to keep team rosters up to date automatically, see [Directory Sync (SCIM)](/directory-sync-scim).

## Roles & Permissions

There are two roles: **Member** and **Admin**. You can assign roles based on identity provider groups.

### Role Assignment

* Define groups in your IdP (ex. `eng-team`, `resolve-admins`)
* Ask your Resolve contact to map those groups to **Member** or **Admin** roles

### Member Permissions

* View and start investigations
* View integrations (read-only)
* View settings (read-only)

### Admin Permissions

Includes all **Member** permissions, plus the ability to:

* Add and manage integrations
* Manage ingest tokens
* Configure data redaction rules