# Allow Users to Log in to Cloud Voice App with Red Hat SSO

Once your Red Hat SSO users have been synced into Cloud Voice, you can switch on single sign-on (SSO) so those users sign in to the Cloud Voice App with the same Red Hat credentials they already use elsewhere, rather than a separate extension password. SSO lets one identity provider (here, Red Hat) handle authentication for many applications, which means fewer passwords for users to manage and one place to disable access when someone leaves.

## Before you begin

- You have [integrated Cloud Voice with Red Hat SSO](/pbx/integrations/red-hat/integrate-cloud-voice-system-with-red-hat-sso/).
- You have [synchronized users from Red Hat SSO to Cloud Voice](/pbx/integrations/red-hat/synchronize-users-from-red-hat-sso-to-cloud-voice/).

## Turn on single sign-on

1. Sign in to the PBX (Private Branch Exchange, your phone system) web portal and go to **Integrations > Collaboration**.
2. Scroll down to the **Single Sign-on (SSO)** section and switch it on.

   ![Single sign-on section with its enable toggle](/images/pbx/google-sso.png)

3. Optional: Use the **Login Method** drop-down list to control how your Red Hat users are allowed to authenticate.

   ![Login Method drop-down with SSO sign-in options](/images/pbx/sso-login-method.png)

   - **Allow users to log in via SSO or using the PBX credential**: users may sign in either through Red Hat SSO or with the account credentials of their assigned extension.

     :::tip
     This is the safer choice for most deployments. It leaves the extension password as a working fallback, so users are not locked out on clients that do not support Red Hat SSO (such as the mobile app).
     :::

   - **Enforce SSO login only**: users may sign in only through Red Hat SSO.

     :::caution
     Red Hat SSO is not currently supported on the Cloud Voice App mobile client. If you enforce SSO-only login, your Red Hat users will not be able to sign in to or use the mobile app.
     :::

4. Click **Save**.

Your synced users can now sign in to the Cloud Voice App directly with their Red Hat credentials.

## Guide your users through signing in

Let your users know how to reach the Cloud Voice App with their Red Hat credentials on each client they use.

### Desktop client

1. Update the Cloud Voice App desktop client to version 1.18.5 or later.

   :::caution
   The Red Hat sign-in option does not appear on desktop client versions earlier than 1.18.5. Users on an older build must update before they can sign in with SSO.
   :::

2. In the **Domain** field, enter the PBX address that is permitted for Red Hat SSO.

   :::note
   This is the PBX web address you allowed when you integrated Cloud Voice with Red Hat SSO. If you are not sure which address to use, check the Red Hat SSO integration settings on the PBX.
   :::

   
   ![Cloud Voice, desktop client Domain field with the PBX address entered](/images/pbx/pc-sso-pce.png)

3. Click the Red Hat icon ![Red Hat](/images/pbx/red-hat.png) and sign in with your Red Hat credentials.

   
   ![Cloud Voice, desktop client Red Hat sign-in prompt](/images/pbx/pc-sso-pce-login.png)

### Web client

1. Open the Cloud Voice App web client at the PBX address that is permitted for Red Hat SSO.
2. Click the Red Hat icon ![Red Hat](/images/pbx/red-hat.png) and sign in with your Red Hat credentials.

   
   ![Cloud Voice, web client Red Hat sign-in prompt](/images/pbx/web-ssp-pce-login.png)