# SSO / SAML Authentication

## Overview

Keeper integrates with any SAML 2.0 compatible identity provider such as Entra ID, Okta, Google Workspace, Duo, OneLogin, Ping Identity, JumpCloud and more.

We offer two different SSO implementations: SSO Connect Cloud and SSO Connect On-Prem. Both implementations provide Zero Knowledge encryption with seamless authentication for end-users. We recommend [SSO Connect Cloud](https://docs.keeper.io/keeper-bridge/overview) for most customers.

## SSO Connect Cloud

![](https://gblobscdn.gitbook.com/assets%2F-MB_i6vKdtG6Z2n6zWgJ%2F-MMvQ4TnV8t5SW_rkITg%2F-MMvQCr3wDuFgtkghLbO%2Fsso-connect-header.jpg?alt=media\&token=5a4f4cd4-055e-4ce5-8acd-f70dbc489405)

Keeper SSO Connect Cloud is the latest Cloud-based architecture which can be configured with your identity provider to authenticate and provision users in a matter of minutes. To read the SSO Connect Cloud setup guide, see the link below:\
\
[https://docs.keeper.io/sso-connect-cloud/](https://docs.keeper.io/sso-connect-cloud)

***

## SSO Connect On-Prem

![](https://gblobscdn.gitbook.com/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MNjWBSnNeGu2hAPQf5F%2F-MNjWJGJknKniht2-49S%2Fsso-connect-onprem.jpg?alt=media\&token=f8cc5d12-c279-401d-9efd-27a245f9d5a3)

SSO Connect On-Prem is a self-hosted integration that requires either a Windows or Linux hosted application server. To read about the SSO Connect On-Prem configuration, see the link below:

[https://docs.keeper.io/sso-connect-guide/](https://docs.keeper.io/en/sso-connect-on-prem/readme)