---
title: Configure SSO for deployments
description: The single sign-on (SSO) feature in ECE allows platform admins and deployment managers to log in to their Kibana instances automatically after they are...
url: https://www.elastic.co/elastic/docs-builder/docs/3016/deploy-manage/users-roles/cloud-enterprise-orchestrator/configure-sso-for-deployments
products:
  - Elastic Cloud Enterprise
applies_to:
  - Elastic Cloud Enterprise: Generally available
---

# Configure SSO for deployments
The single sign-on (SSO) feature in ECE allows `platform admins` and `deployment managers` to log in to their Kibana instances automatically after they are logged in to ECE.
<note>
  Single sign-on is not available for system deployments; you need to use credentials to log in to them.
</note>

To use single sign-on, you first need to [configure the API base URL](https://www.elastic.co/elastic/docs-builder/docs/3016/deploy-manage/deploy/cloud-enterprise/change-ece-api-url). After this is set, all new deployments are SSO-enabled automatically, and existing deployments become SSO-enabled after any plan changes are applied.