SAML 2.0 SSO Configuration
Teams ($40/user/month) and Enterprise plans support SAML 2.0 Single Sign-On. Supported identity providers include Okta, Azure Active Directory, OneLogin, PingFederate, and any SAML 2.0 compliant provider. The admin configures the SSO connection in the Cursor team dashboard — provide the IdP metadata URL, entity ID, and certificate. Once configured, team members enter their company email on the Cursor login screen and are redirected to the corporate IdP for authentication. No separate Cursor password is needed. According to NIST guidelines on digital identity, SSO reduces credential-related security incidents by 50% in enterprise environments.