> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omni.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Rippling authentication

> Connect Omni to Rippling for secure SAML single sign-on and automated user provisioning.

You can connect Omni to Rippling to manage authentication and user access through your organization’s existing identity provider.

Rippling supports **SAML** for single sign-on and **SCIM** for automated user provisioning.

## Integration overview

Connecting Rippling to Omni allows you to:

1. **Authenticate users** through Rippling using SAML.
2. **Control when and how users are provisioned** in Omni.

### User provisioning options

Omni supports two approaches for provisioning users:

| Option                       | How it works                                                         | When to use                                                                                      |
| ---------------------------- | -------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
| **SCIM provisioning**        | Users are created in Omni when assigned to the Omni app in Rippling. | You want users provisioned immediately upon assignment, regardless of whether they've logged in. |
| **First-login provisioning** | Users are created in Omni only when they first log in via SAML.      | You want to control seat usage by provisioning users only when they actually access Omni.        |

You can use first-login provisioning with or without SCIM. Refer to the [SAML setup guide](/administration/authentication/rippling/saml) for more details.

## Getting started

Follow these steps to get set up.

You can complete SAML only, or add SCIM and attribute sync for a fully automated experience.

| Step | Description                                                                                 | Link                                                         |
| ---- | ------------------------------------------------------------------------------------------- | ------------------------------------------------------------ |
| 1    | **Set up SAML SSO** to let users sign in to Omni with their Rippling credentials.           | [SAML setup →](/administration/authentication/rippling/saml) |
| 2    | **Enable SCIM provisioning** to automatically create, update, and deactivate users in Omni. | [SCIM setup →](/administration/authentication/rippling/scim) |

## Notes and troubleshooting

* **Admin access required:** You’ll need Rippling admin permissions to configure SAML and SCIM.
* **Test before rollout:** Try SSO with a test user before enabling it organization-wide.

If you run into issues, check your Rippling app configuration or see [Omni's troubleshooting SSO guide](/administration/authentication/troubleshooting).

## Related

* [Omni SAML configuration overview](/administration/authentication)
* [Managing users and groups in Omni](/administration/users)
* [Rippling documentation](https://\[idp-docs-link]/)