Hugging Face's logo

Hub documentation

SSO Configuration Guides

Hugging Face's logo
Join the Hugging Face community

and get access to the augmented documentation experience

to get started

SSO Configuration Guides

This feature is part of the Team & Enterprise plans.

These guides help you configure SAML 2.0 and OpenID Connect (OIDC) with your Identity Provider for Basic SSO. Hugging Face Hub can work with any SAML or OIDC-compliant Identity Provider.

If you are looking to set up Managed SSO, the configuration is done in collaboration with the Hugging Face team. Please contact us to get started.

OIDC token endpoint authentication method. When exchanging the authorization code, Hugging Face authenticates to your Identity Provider’s token endpoint using the client_secret_post method. If your IdP application is configured to expect a different method (such as client_secret_basic), the login will fail with an invalid_client error. To resolve this, set your IdP application’s token endpoint authentication method to client_secret_post.

Okta

Microsoft Entra ID (Azure AD)

Google Workspace

Update on GitHub

←User Provisioning (SCIM) How to configure OIDC with Okta→