Skip to content
Galeo

Get single sign-on running this week.

Four steps from an empty tenant to everyone signing in. Each step links to the full guide in the docs.

  1. Step 1: Turn on sign-in methods

    Choose how people sign in: password and TOTP, passkeys, PIV / CAC smart cards, or federation with an upstream OIDC, SAML, or OAuth provider. Most teams start with their existing identity provider and add passkeys.

    Read the guide for turn on sign-in methods (opens in a new window)

  2. Step 2: Add your first application

    Register an app under Admin, Applications, New. Choose SAML, OIDC, or OAuth 2.0, define its roles, and copy Galeo’s metadata into the application.

    Read the guide for add your first application (opens in a new window)

  3. Step 3: Set the security policy

    Configure password rules, MFA requirements, session timeouts, and lockout thresholds. The defaults suit most organizations; tighten them for higher-assurance apps.

    Read the guide for set the security policy (opens in a new window)

  4. Step 4: Test sign-in from the portal

    Sign in to the user portal yourself or with a teammate and confirm the application launches.

    Read the guide for test sign-in from the portal (opens in a new window)

Need approvals?

Identity Governance adds roles, access requests, and multi-step approval workflows for the systems that need them.

Governance quickstartOpen the docs (opens in a new window)