> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dojah.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Enterprise Login

> Let team members sign in to Dojah with your company's identity provider — LDAP, SAML, or OIDC.

**Enterprise Login** sends team members to your company's identity provider before they can open the Dojah dashboard. The first time someone signs in this way, Dojah creates their account and assigns the **Default Role** you choose here. Create that role under [Team](/dashboard-guide/account/settings/team) before you turn Enterprise Login on.

## Login options

Dojah supports LDAP, SAML, and OIDC. Each option needs **Allowed Email Domains** and a **Default Role**. Only email addresses on those domains can sign in through the provider.

<img src="https://mintcdn.com/dojah/rP5wKAkY0cUaarsy/images/dashboard-guide/settings-enterprise-login.png?fit=max&auto=format&n=rP5wKAkY0cUaarsy&q=85&s=7086eb7b236d402492f3f7834d516ace" alt="Enterprise Login options for LDAP, SAML, and OIDC" width="1918" height="851" data-path="images/dashboard-guide/settings-enterprise-login.png" />

| Type | What you provide | What Dojah gives you |
| - | - | - |
| LDAP | LDAP host, connection type (**STARTTLS** or **LDAPS**), user filter, bind DN, and bind password. | — |
| SAML | Identity provider SSO URL, entity ID, and certificate. | A **Callback URL** to register with your identity provider. |
| OIDC | Issuer URL, client ID, and client secret. | A **Callback URL** to register with your identity provider. |

The user filter and bind credentials come from your identity provider.

## Turn on a provider

<Steps>
  <Step title="Open Enterprise Login">
    Go to **Settings** and select **Enterprise Login**.
  </Step>

  <Step title="Configure the provider">
    Choose **LDAP**, **SAML**, or **OIDC**, then select **Configure**.
  </Step>

  <Step title="Enter the provider details">
    Fill in the fields for that protocol, add your allowed email domains, and choose the default role for new members.
  </Step>

  <Step title="Activate">
    Select **Activate**. Team members on an allowed domain can now sign in with that provider.
  </Step>
</Steps>

<img src="https://mintcdn.com/dojah/rP5wKAkY0cUaarsy/images/dashboard-guide/settings-enterprise-login-ldap.png?fit=max&auto=format&n=rP5wKAkY0cUaarsy&q=85&s=394c651c0a90e447f16bf868daedfc98" alt="The Configure LDAP Login dialog" width="1918" height="865" data-path="images/dashboard-guide/settings-enterprise-login-ldap.png" />

## How team members sign in

1. On the Dojah login screen, select **Continue with Enterprise Login**.
2. Enter a work email address. The domain must be one you allowed when configuring the provider.
3. They complete sign-in with your identity provider.
4. Dojah opens the dashboard. A first-time user gets an account with the default role.

<img src="https://mintcdn.com/dojah/rP5wKAkY0cUaarsy/images/dashboard-guide/enterprise-login-signin.png?fit=max&auto=format&n=rP5wKAkY0cUaarsy&q=85&s=0e4efb3f78247bb312526be6e7487a5c" alt="Continue with Enterprise Login on the Dojah sign-in screen" width="1906" height="882" data-path="images/dashboard-guide/enterprise-login-signin.png" />

<img src="https://mintcdn.com/dojah/rP5wKAkY0cUaarsy/images/dashboard-guide/enterprise-login-email.png?fit=max&auto=format&n=rP5wKAkY0cUaarsy&q=85&s=ae9145dc68b83bf19ac247712e424ae6" alt="The Enterprise Login email step" width="1918" height="896" data-path="images/dashboard-guide/enterprise-login-email.png" />


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.