> For the complete documentation index, see [llms.txt](https://docs.advantys.com/workflowgen-integration-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.advantys.com/workflowgen-integration-guide/8.0.0-8/custom-authentication/shibboleth-sp3-sso.md).

# Shibboleth SP3 SSO

## Overview

Clients that are already using [Shibboleth Service Provider 3](https://wiki.shibboleth.net/confluence/display/SP3/Home) to manage resource access (such as services or applications) can quickly integrate with WorkflowGen by offering users Single Sign-On (SSO) authentication for a secure and seamless user experience.

For this, Shibboleth SP3 provides a native module for IIS 7 and later that passes user information to WorkflowGen via the `REMOTE_USER` environment variable.

The WorkflowGen website and web apps should have only the `Anonymous Authentication` method enabled under the IIS Manager Authentication feature page.

## Installation

For installation and configuration details, see the [Shibboleth SP3 IIS](https://wiki.shibboleth.net/confluence/display/SP3/IIS) documentation.