> For the complete documentation index, see [llms.txt](https://mariadb.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mariadb.com/docs/tools/mariadb-enterprise-manager/administration/deployment/adding-databases/sso-to-maxscale-single-sign-on.md).

# SSO to MaxScale (Single Sign-On)

For topologies managed by MaxScale, you can seamlessly access the MaxScale GUI directly from Enterprise Manager using Single Sign-On.SSO to MaxScale requires MaxScale 25.10.0 or higher.1

{% stepper %}
{% step %}
**Accessing the MaxScale GUI**

1. Click the three-dot menu (⋮) next to a MaxScale node.
2. Select "Manage MaxScale".

<figure><img src="/files/P7SiM66rharO1AljzFy3" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
**Configuring SSO in `maxscale.cnf`**

To enable SSO, add the following parameters to your MaxScale configuration file (`maxscale.cnf`) on the MaxScale host:

| Parameter                  | Description                                                                     |
| -------------------------- | ------------------------------------------------------------------------------- |
| `admin_oidc_url`           | Hostname or IP address of your Enterprise Manager server.                       |
| `admin_host`               | Must be set to `0.0.0.0` to allow external connections from Enterprise Manager. |
| `admin_oidc_client_id`     | Default credentials used by Enterprise Manager to request the access token.     |
| `admin_oidc_client_secret` | Default credentials used by Enterprise Manager to request the access token.     |

```ini
[maxscale]
# ... other settings ...
admin_host=0.0.0.0
admin_oidc_url=<Enterprise Manager Host Name>
admin_oidc_client_id=admin
admin_oidc_client_secret=mariadb
```

{% endstep %}
{% endstepper %}

<sub>*This page is: Copyright © 2025 MariaDB. All rights reserved.*</sub>

{% @marketo/form formId="4316" %}