Configure Single Sign-On (SSO)

Configure SSO for your CARTO Self-Hosted instance using Kots or Helm

This guide outlines the steps to configure Single Sign-On (SSO) for your CARTO Self-Hosted instance. SSO allows users to log in with a single set of credentials across multiple systems. For background on SSO configuration in CARTO, see SSO integration.

Prerequisites

SSO configuration requires involvement from CARTO Support. Contact support@carto.com before starting.

Contact CARTO Support — initiate the SSO configuration request and share your organization's requirements.
Receive your Organization ID — once SSO is configured on the CARTO side, Support will provide a unique Organization ID required to complete the setup on your installation.

Configuration

Inject the Organization ID provided by CARTO Support into your CARTO Self-Hosted instance:

In the Admin Console, locate the SSO Organization ID field and enter the value provided by CARTO Support.

Click Save config and then Deploy to apply the change.

Add the following to your customizations.yaml, replacing the value with the Organization ID provided by CARTO Support:

appConfigValues:
  ssoOrganizationId: "<YOUR_ORGANIZATION_ID>"

Then apply the change:

helm upgrade carto carto/carto \
  --namespace <namespace> \
  -f carto-values.yaml \
  -f carto-secrets.yaml \
  -f customizations.yaml

Once deployed, navigate to your CARTO deployment domain. It will redirect users to your identity provider for login.

PreviousSecurity & Cloud Identities NextCloud Identities

Last updated 11 days ago

Was this helpful?