ORBIS Cloud supports SAML 2.0 and OpenID Connect for customer single sign-on. Configure it under Tenancy Settings → Identity.

The service provider metadata is published at https://identity.terravek.com/saml/metadata. Terravek supports SP-initiated and IdP-initiated flows, and just-in-time provisioning with group-to-role mapping.

Enabling SSO does not automatically disable password authentication for existing users. Do that explicitly once you have verified the flow, under Identity → Enforcement.