> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cantina.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Google SSO Enforcement Rule Setup

Learn how to configure Google SSO enforcement for your Cantina organization.

This document explains how to enforce **Google OAuth/SSO authentication** for users in the `your-company.com` email domain.

## Where to Configure

To configure this setting, navigate to:

**Organization Settings → Single Sign-On**

<Frame>
  <img src="https://mintcdn.com/cantina/IgIJHc0dF614QbWH/images/Screen-Shot-2026-04-15-at-5.35.37-PM.png?fit=max&auto=format&n=IgIJHc0dF614QbWH&q=85&s=be71812c9524c3c9ba0a044c1d026bf3" alt="Screen Shot 2026 04 15 At 5 35 37 PM" width="3588" height="1646" data-path="images/Screen-Shot-2026-04-15-at-5.35.37-PM.png" />
</Frame>

## Create SSO Enforcement Rule

1. Select **Add SSO Enforcement Rule**.
   <Frame>
     <img src="https://mintcdn.com/cantina/IgIJHc0dF614QbWH/images/Screen-Shot-2026-04-15-at-5.35.59-PM.png?fit=max&auto=format&n=IgIJHc0dF614QbWH&q=85&s=3e8ff1ccb093e1bab67b97b40c5e0c2f" alt="Screen Shot 2026 04 15 At 5 35 59 PM" width="1392" height="888" data-path="images/Screen-Shot-2026-04-15-at-5.35.59-PM.png" />
   </Frame>
2. In **Email Domain**, enter:
   * `your-company.com`
3. Create rule

## Expected Behavior

Once enabled, **all users with an email address ending in `@your-company.com` will be required to sign in using Google SSO**.

Users will no longer be able to authenticate with password-based login methods for this domain.