# Airtable

> Configure Airtable single sign-on (SSO) with Ironchip over SAML 2.0: create the application, add the identity provider, and enforce SSO.

URL: https://docs.ironchip.com/en/identidad/integraciones/saas/airtable/

Ironchip acts as the SAML 2.0 identity provider for Airtable. This guide explains how to register Ironchip as an SSO identity provider in the Airtable admin panel.

## Requirements

- Access to the Ironchip admin console.
- An Airtable Enterprise account with access to the **Admin** panel.

## Configure Ironchip

Before you add the SSO metadata (**sign-in URL** and **x509 certificate**) in Airtable, you need to get it from Ironchip.

1. In the Ironchip admin console, create a **SAML** application. See [Applications](https://docs.ironchip.com/en/identidad/administracion/aplicaciones/) and [SAML](https://docs.ironchip.com/en/identidad/protocolos/saml/) for the steps.
2. Download the Ironchip metadata with **Download metadata file** when you create the application. The document contains the sign-in URL and the certificate.
3. Add to the application the users who will authenticate with it.

## Configure Airtable

1. Sign in to Airtable.
2. Click your user icon and select **Admin**.
3. In the left sidebar, go to **Settings** and open the **SSO & Authentication** tab (**Security & Authentication**).
4. In the SSO configuration section, click **Add SSO identity provider**. A configuration window opens.
5. Choose the domain this SSO configuration maps to. The drop-down lists all the domains associated with your Enterprise account.

   :::note
   If you expect to see other domains in the list, contact your Airtable account representative to make the necessary changes.
   :::

6. Fill in the fields with the Ironchip metadata:
   - **Sign-in URL**: the one in the document you downloaded from the Ironchip admin console.
   - **x.509 certificate**: paste the certificate from that same document.
   - **Metadata version**: select **v2**. Partner integrations use the default **V2** option.
7. Click **Save**. A pop-up asks you to confirm. Click **Save** again.

Changes may take a few minutes to appear. After you save, the **Settings** page reloads. From that tab you can also click **Edit metadata** if you need to change it later or delete the configuration altogether.

## Verify the integration

Before you require SSO for your own email domain, check that the metadata you provided is correct:

1. Sign out of Airtable and sign back in with SSO.
2. If sign-in works, go back to the **SSO & Authentication** tab.
3. Toggle the switch under **SSO optional/required** to sign out all users of the configured domain and enforce SSO.