Doc status: CSE-side steps reviewed 2026-06-29. The third-party IdP console steps follow the vendor's own documentation and should be confirmed against the live admin console, which can change without notice.

This quick start walks through the CSE Federated technique — configuring the SaaS application's SSO directly against CSE's TrustProvider so that CSE can enforce per-application device policies. It is one of the two ways to implement IdP Federation; for the alternative, where federation is configured inside your Identity Provider, see IdP Routed.