# Single sign-on

Foldr authenticates against the identity provider you already run.
Once someone’s signed in, the answer to “what can they see” comes from the storage backend itself, not from a duplicate ACL inside Foldr.

[Start free trial](https://foldr.com/trial) [Security note](https://foldr.com/security)