---
title: How to set up SSO with Authentik
description: This page helps you to implement Single Sign-On in your Organization with Authentik 
dates:
  validation: 2025-12-10
  posted: 2025-12-10
---
import Requirements from '@macros/iam/requirements.mdx'

Scaleway supports Identity Federation to provide your teams with secure access to their accounts via SAML Single Sign-On.

<Message type="note">
  SSO with SAML does not apply to an Organization's Owner. Owners can log in with SSO with OAuth2.
</Message>

Follow the steps below to set up Identity Federation for your Organization through SAML at Scaleway.

<Requirements />

- A Scaleway account logged into the [console](https://console.scaleway.com)
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
- Authentik instance and user allowing you to perform admin actions.

## Create a new Identity Provider

### On Scaleway console

1. Go to your security settings.
2. Scroll to the **Configure Identity Federation** section.
3. Click **Set up SAML SSO**. A pop-up appears.
4. Click **Start**
5. Open another tab to start IdP configuration on Authentik.

### On Authentik

1. Look for **Applications** in your sidebar and click to open **Providers** section.
2. Click **Create**. A pop-up appears.
3. Choose **SAML** provider type.
4. Click **Next**.
5. Fill the configuration form.
    - Name: "Scaleway IDP"
    - ACS URL: **Assertion consumer service (ACS) URL** (from Scaleway tab)
    - Issuer: **Scaleway Entity ID**  (from Scaleway tab)
    - Service Provider Binding: Select **Post**
    - Advanced protocol settings
        - Signing Certificate: Select **authentik Self-signed Certificate**
        - Toggle **Sign assertions** and **Sign responses** on
        - NameID Property Mapping: Select **authentik default SAML Mapping: Username**
6. Click **Finish**
7. Click on your newly created Provider in the list.
8. Click the **Create** button below **Assigned to application**. A pop-up appears.
9. Fill the configuration form.
    - Name: "Scaleway"
    - Provider: Select **Scaleway IDP**
10. Click **Create**
11. Click to download the metadata file in the **Related objects section**
12. Go back to the Scaleway Console tab.

### On Scaleway console

1. Upload the metadata file using the **Download metadata** button.
2. Click **Submit**. A pop-up appears.
3. If you are sure that you don't use OAuth2 SSO, click **Confirm**

Once setup is complete, members can log in via SAML.

<Message type="important">
  - In order to log in via SAML, members need to be [created manually](/iam/how-to/manage-members/#how-to-create-a-member) in your Scaleway organization.
  - If you delete a user in the IdP, the corresponding Member is not automatically deleted in your Scaleway Organization. The [deletion must happen manually](/iam/how-to/manage-members/#how-to-delete-a-member).
</Message>