# Configure Single Sign-On for Automation HQ workspaces
Workato supports SAML-based Single Sign-On (SSO) for Automation HQ (AHQ) workspaces, including child workspaces. Workato recommends enabling SSO for AHQ and child workspaces. You must enable SSO separately for each child workspace. Even if your AHQ workspace has SSO enabled, this doesn't automatically enable SSO for all child workspaces. Refer to Create a workspace in Automation HQ for more information about creating workspaces.
Complete the following steps to configure SSO for AHQ workspaces:
- Complete the setup instructions for your identity provider (IdP).
- Complete the configuration instructions in Workato.
SSO FOR CHILD WORKSPACES
You must configure each AHQ child workspace separately in your IdP. Refer to the AHQ child workspaces for more information.
# AHQ child workspaces
You must configure each child workspace as a separate app and assign it to a unique group in your IdP to enable SSO.
For each child workspace:
- Complete the setup instructions for your identity provider (IdP).
- Complete the configuration instructions in Workato.
- Create a separate group (opens new window) for each child workspace where you plan to enable SSO.
Last updated: 6/12/2025, 9:29:58 PM