> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omni.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Embed standard SSO

> Set up standard SSO for Omni embedding by generating a signed URL that creates an embed user session with a single request.

With standard SSO, you generate and use a single URL to create an embed user and session. Omni embed URLs are signed with a secret key used only by your organization. When an Omni server receives the request, it verifies the signature using that secret. If the signature checks out, the request is honored.

Two signing formats are supported for standard SSO:

| Format                                                      | Status                                      | Description                                                                                                                                                                                                       |
| ----------------------------------------------------------- | ------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [**v1 (signed payload)**](/embed/setup/standard-sso/latest) | <Badge color="green">latest</Badge>         | Every [parameter](/embed/setup/url-parameters) is included inside a single `payload` query parameter that the signature covers as a whole. If generating with the SDK, requires `@omni-co/embed` v1.0.0 or later. |
| [**v0 (legacy)**](/embed/setup/standard-sso/v0-legacy)      | <Badge color="gray">v1 (deprecated)</Badge> | Each parameter is sent as its own query parameter alongside a `signature`. Deprecated: unsupported after October 1, 2026, and removed by January 1, 2027.                                                         |

Both formats are accepted at `/embed/login`, so existing integrations will continue to work. Use v1 for new integrations, and plan to migrate existing ones.

<Warning>
  Because embed URLs are signed using your Omni organization's embed secret, it is crucial that your embed URLs are generated server-side rather than client-side. From a security perspective, this protects your embed secret from being exposed to attackers.

  Also note that the Omni TypeScript SDK utilizes Node's `crypto` module, which is only available in Node environments. Attempting to use the Omni TypeScript SDK functions in a client-side context will likely lead to the SDK functions generating improperly signed embed URLs.
</Warning>