Configure Single Sign-On (SSO)

Configure SSO for your CARTO Self-Hosted instance using Kots or Helm

This guide outlines the steps to configure Single Sign-On (SSO) for your CARTO Self-Hosted instance. SSO allows users to log in with a single set of credentials across multiple systems. For background on SSO configuration in CARTO, see SSO integration.

Prerequisites

SSO configuration requires involvement from CARTO Support. Contact [e-mail] before starting.

1. Contact CARTO Support — initiate the SSO configuration request and share your organization's requirements.

2. Receive your Organization ID — once SSO is configured on the CARTO side, Support will provide a unique Organization ID required to complete the setup on your installation.

Configuration

Inject the Organization ID provided by CARTO Support into your CARTO Self-Hosted instance:

☸️ Kots (Admin Console)

Kots

In the Admin Console, locate the SSO Organization ID field and enter the value provided by CARTO Support.

Click Save config and then Deploy to apply the change.

🛞 Helm (customizations.yaml)

Helm

Add the following to your customizations.yaml, replacing the value with the Organization ID provided by CARTO Support:

appConfigValues:
  ssoOrganizationId: "<YOUR_ORGANIZATION_ID>"

Then apply the change:

helm upgrade carto carto/carto \
  --namespace <namespace> \
  -f carto-values.yaml \
  -f carto-secrets.yaml \
  -f customizations.yaml

Once deployed, navigate to your CARTO deployment domain. It will redirect users to your identity provider for login.