> Markdown version of [SSO Kit (deprecated)](https://vaadin.com/docs/next/tools/sso). Section index: [llms.txt](https://vaadin.com/docs/next/tools/llms.txt)

# SSO Kit (deprecated since V25.3)

> **Note: Commercial Feature**
>
> A commercial Vaadin subscription is required to use SSO Kit in your project.
>
> - [Start Trial](https://vaadin.com/pro/validate-license)
>
> - [See Pricing](https://vaadin.com/pricing)

SSO Kit is deprecated and won’t be available in Vaadin 26.

A replacement is already in place: all of the kit’s major features are now available directly in Spring Security and in Vaadin’s Spring Security integration. See [Migrating from SSO Kit to Spring Security](https://vaadin.com/docs/next/tools/sso/migrating-to-spring-security.md) for how to move an existing application, and which features you have to build yourself.

SSO Kit provides all of the configuration needed to add single sign-on capabilities to your Vaadin applications, based on [OpenID Connect](https://openid.net/connect/). However, it depends on Spring Boot and Spring Security.

The following identity providers are supported:

- [Okta](https://www.okta.com/)

- [Keycloak](https://www.keycloak.org/)

- [Azure Active Directory (Microsoft Entra ID)](https://azure.microsoft.com/en-us/products/active-directory/)

SSO Kit needs at least one OpenID Connect client configured on an instance of these providers.

## <a id="topics"></a>Topics

- [Getting Started](https://vaadin.com/docs/next/tools/sso/getting-started.md): Step-by-step guide on how to use SSO Kit in a Vaadin Flow application.
- [Theming](https://vaadin.com/docs/next/tools/sso/theming.md): How to customize the login screen of SSO Kit authentication providers.
- [Integrations](https://vaadin.com/docs/next/tools/sso/integrations.md): How to use SSO Kit with vendor-specific tutorials.
- [Migrating to Spring Security](https://vaadin.com/docs/next/tools/sso/migrating-to-spring-security.md): How to replace SSO Kit with Spring Security's built-in OAuth2 and OpenID Connect support.