Configuring host authentication settings

As a system administrator, you can choose the authentication and related default security settings for your entire installation. These settings are inherited by all organizations as default.

Note:

This article walks you through the steps for configuring global authentication and security settings. If you want to configure organization-level settings, i.e., settings that apply to one organization, refer to Organization-level authentication settings.

Global authentication settings (host level)

Automation Suite allows you to configure an external identity provider to control how your users sign in. Settings here apply to all organizations.

The following table provides an overview of the different host-level external providers available:

External Provider Integration	Authentication	Directory Search	Administrators Provisioning
	Administrators can use SSO with Windows Authentication using the Kerberos protocol	Administrators can search for users from the Active Directory	For a user to be able to login, either the user or a group that the user is a member of should already be added to the UiPath platform. Active Directory users and groups are available in the UiPath platform through directory search.
	Administrators can use SSO with Azure AD using the OpenID Connect protocol	Not supported	Users must be manually provisioned into the UiPath organization with an email address matching their Azure AD account.
	Users can use SSO with Google using the OpenID Connect protocol	Not supported	Users must be manually provisioned into the UiPath organization with an email address matching their Google account.
	Users can use SSO with any Identity Provider that supports SAML	Not supported	Users must be manually provisioned into the UiPath organization with a username/email/external provider key (as configured in their external identity provider configuration) matching their SAML account.

Note: Differences between integrating Azure AD at host-level and organization-level: The host-level functionality only enables SSO. The organization-level AAD integration enables SSO, directory search, and automatic user provisioning.