SSO

Overview

SAML 2.0 SSO is available at no additional cost on Teams and Enterprise plans. Use your existing identity provider (IdP) to authenticate team members without separate Cursor accounts.

Prerequisites

• Cursor Team plan
• Admin access to your identity provider (e.g., Okta)
• Admin access to your Cursor organization

Configuration Steps

View your SSO configuration

Admins can review an existing SSO connection and its domains at any time:

1. Go to Single Sign-On (SSO) settings with an admin account.
2. Click "Configure" next to "SSO-Provider Connection Settings" to view the provider connection details.
3. Click "Configure" next to "Domain Verification Settings" to view or manage verified domains.

These settings are available to team admins.

Identity Provider Setup Guides

For provider-specific setup instructions:

Identity Provider Guides

Setup instructions for Okta, Azure AD, Google Workspace, and more.

Additional Settings

• Manage SSO enforcement through admin dashboard
• New users auto-enroll when signing in through SSO
• Handle user management through your identity provider

Multiple domains

To handle multiple domains in your organization:

1. Verify each domain separately in Cursor through the domain verification settings
2. Configure each domain in your identity provider
3. Each domain needs to go through the verification process independently

Troubleshooting

If issues occur:

• Verify domain is verified in Cursor
• Ensure SAML attributes are properly mapped
• Check SSO is enabled in admin dashboard
• Match first and last names between identity provider and Cursor
• Check provider-specific guides above
• Visit the SSO help center if issues persist