# OIDC (Pro)

DefectDojo Pro supports login via a generic OpenID Connect (OIDC) provider. Open-source DefectDojo does not include SSO — see [Authorized Users](https://docs.defectdojo.com/admin/user_management/os__authorized_users/) for open-source access control.

## Configuration

In DefectDojo, go to **Enterprise Settings > OIDC Settings**.

Fill in the form:

1. **Endpoint** — the base URL of your OIDC provider. Do not include `/.well-known/openid-configuration`.
2. **Client ID** — your OIDC client ID.
3. **Client Secret** — your OIDC client secret.
4. Check **Enable OIDC**.

Submit the form. A **Log In With OIDC** button will appear on the DefectDojo login page.
