# Single Sign-On

EI Tunnel Manager supports Single Sign-On (SSO). Single Sign-On is a session and user authentication service that permits you to use a single set of login credentials. For example, you can set up a username and password that allows you to access multiple applications.

When choosing SSO on the EI Tunnel Manager login page, you are directed to the authentication service login page where you provide your credentials. Once your credentials are validated, you are redirected back with the security token to EI Tunnel Manager and logged in. You need to

To configure this process on EI Tunnel Manager, set up HTTPS with uploading certificates. From there, configure roles and map these roles to an existing one in the customer identity provider.

Then, you have to setup EI Tunnel Manager as a client and configure return URLs. For more information, see Role Mapping.

Note: EI Tunnel Manager only supports the OpenID Connect (OIDC) standard for Single Sign-On.