# Installation and Setup

The basic steps for setting up Keeper SSO Connect are listed in the steps below. Detailed instructions are annotated further in this guide.

{% hint style="danger" %}
**Security Note:** The server or virtual machine running the SSO Connect service must be strictly protected from unauthorized local access. Any user with access to the host system can interact with and potentially modify the SSO Connect service. Ensure that only trusted administrators have access to the system running SSO Connect, and follow best practices for server hardening and access control.
{% endhint %}

### Pre-requisites

In order to successfully complete the SSO Connect setup in the fastest possible time, please have the below items prepared:

1. Access to a Windows or Linux instance to run the service
2. Access to either a wildcard SSL certificate or ability to generate a new SSL cert for the endpoint (e.g. sso.mycompany.com)
3. Ability to configure https browser traffic from the end-user's browser to the service
4. Access to the Keeper Admin Console web interface

{% hint style="info" %}
At least one non-sso admin user with Bridge/SSO Admin Permissions is require to log into the the SSO Connect server.
{% endhint %}

### Setup Steps

Once you have met the pre-requisites above, the setup steps are as follows:

1. &#x20;Enable SSO Connect from the Keeper Admin Console
2. &#x20;Install Keeper SSO Connect on your server (any cloud or on-prem Windows/Linux instance)
3. &#x20;Configure Keeper SSO Connect with the Identity Provider
