# SAML

Sign in to Wise using single sign-on (SSO) with your SAML 2.0 identity provider. Wise acts as the SAML service provider.
These endpoints follow the [SAML 2.0 Web Browser SSO Profile](https://docs.oasis-open.org/security/saml/v2.0/saml-profiles-2.0-os.pdf). They are part of a browser-based sign-in flow and are not general-purpose REST API endpoints, so they do not use API tokens.
SAML SSO requires configuration on the Wise side. To enable it for your integration, contact your Wise implementation team.
To set up SSO, configure Wise as a service provider in your identity provider using the [service provider metadata](/api-reference/saml/samlmetadataget). To start sign-in from Wise, open SP-initiated login in your browser. After you authenticate, your identity provider sends the SAML response to the [Assertion Consumer Service](/api-reference/saml/samlassertionconsumerservice) endpoint.

 - [POST /login/saml2/sso](https://docs.wise.com/api-reference/preview/saml/samlassertionconsumerservice.md): Receives the SAML authentication response from your identity provider after you authenticate. The identity provider sends a `SAMLResponse` to this endpoint using the SAML HTTP POST binding. The respon
 - [GET /saml2/metadata](https://docs.wise.com/api-reference/preview/saml/samlmetadataget.md): Returns the SAML 2.0 metadata for the service provider. Use this metadata when configuring the service provider in your identity provider. It includes the information required by the identity provider
 - [GET /saml2/authenticate/{registrationId}](https://docs.wise.com/api-reference/preview/saml/samlauthenticate.md): Starts an SP-initiated SAML authentication flow. When you open this endpoint, you are redirected to your configured identity provider with a SAML authentication request. After you authenticate, your i