> ## Documentation Index
> Fetch the complete documentation index at: https://help.dingtalk.io/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO

> Manage accounts through your organization's identity system and connect them to DingTalk with protocols like OIDC, including preset integrations for supported IDaaS providers.

Accounts are created and managed within the organization's own identity system, and are created via identity authentication protocols (such as OIDC) through API calls. Preset configurations are currently available for Jiuzhou Yunteng IDaaS, Zhucloud IDaaS, GTS ECUS, and Shuxi Cloud Identity Connector.

***

## II. Operation Flow

| Interface                                                                                                                                                                                                                                                                                                                      | Instructions                                                                                                                                                                                                                                                                                                                                                          |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Query User Details API:<br />[https://open.dingtalk.com/document/orgapp/query-user-details](https://open.dingtalk.com/document/orgapp/query-user-details)<br />Create SSO Account API:<br />[https://open.dingtalk.com/document/orgapp/create-an-sso-account](https://open.dingtalk.com/document/orgapp/create-an-sso-account) | Account synchronization integration:<br />1. Use the **Query User Details API** to obtain the userid of employees in the organization.<br />2. In your own account system, establish the mapping between your accounts and DingTalk accounts. **Unique matching value: userid**.<br />3. Use the **Create SSO Account API** to synchronize your accounts to DingTalk. |

In the Admin Console, go to **Organization settings > SSO** to configure the sign-in method.

<Frame>
  <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/Lk3lbmb24p3kJOm9/img/c8d494a0-973f-43dc-990c-7990615d1518.png" alt="SSO sign-in configuration in the Admin Console" />
</Frame>