# How to set up Single Sign-On (SSO) on TagoRUN with Auth0

**URL:** <https://community.tago.io/t/how-to-set-up-single-sign-on-sso-on-tagorun-with-auth0/1727>\
**Category:** Tutorials\
**Tags:** tutorials\
**Created:** [June 10, 2025, 1:10pm UTC](https://community.tago.io/t/how-to-set-up-single-sign-on-sso-on-tagorun-with-auth0/1727 "2025-06-10T13:10:29Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![felipe.gutierre](https://yyz2.discourse-cdn.com/flex034/user_avatar/community.tago.io/felipe.gutierre/32/1596_2.png) [@felipe.gutierre](https://community.tago.io/u/felipe.gutierre)\
**Post date:** [June 10, 2025, 1:10pm UTC](https://community.tago.io/t/how-to-set-up-single-sign-on-sso-on-tagorun-with-auth0/1727/1 "2025-06-10T13:10:29Z")

</div>

Hi everyone!

In this tutorial, I’ll show you how to configure [Single Sign-On (SSO)](https://help.tago.io/portal/en/kb/articles/491-single-sign-on-sso) on your TagoRUN using the Auth0 authentication platform. The steps below can also be applied to other platforms, as they are all very similar.

1. Create an account in Auth0

2. Create a new **Application** with the type **Single Page Application**

3. Open the new Application to configure it

4. Enable **SAML2 Web App** addon in the **Addons** tab

5. Download the **Identity Provider metadata** file in the SAML2 modal

6. Copy the **ACS URL** from the **Single Sign-On tab** on the TagoRUN edit page

7. Set the **Application Callback URL** to the copied **ACS URL** in the SAML2 addon

8. Copy the **SLO URL** from the **Single Sign-On** tab on the TagoRUN edit page

9. Set the settings object in the SAML2 addon and use the copied **SLO URL in ‘callback’ parameter**

10. Click to **Enable** the SAML2 addon at the bottom of the modal

11. Go to the **Settings** tab in the Auth0 application

12. Ensure that **Allowed callback URLs** include the ACS URL

13. Ensure that **Allowed logout URLs** include the login page address for TagoRUN

14. Import the **metadata file** in the RUN edit page (Admin \> RUN \> Integrations \> Single Sign-on)

15. Set the **email mapping** to [http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress](http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress)

16. Set the **name mapping** to [http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name](http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name)

17. Click **Enable** to enable SSO integration and save the TagoRUN to deploy

**Troubleshooting**

After configuring SSO, I am being redirected to the Identity Provider login page, but I’m seeing an error message for ‘missing email field’ or ‘missing name field’.

 ![](https://canada1.discourse-cdn.com/flex034/uploads/tagoio1/original/2X/a/ae13ee560488a7af013b111acc2393a9ee17bec1.png)

To solve that issue, you need to configure mappings for SAML attributes on both the Identity Provider and TagoIO Admin.

 ![](https://canada1.discourse-cdn.com/flex034/uploads/tagoio1/original/2X/2/2416d11e6425eee8c5add6a3708cf297a5e46a2a.png)

And that is all!

If you need any assistance, feel free to add a comment below!