_authsso_config.html.md.erb

1. Select **Authentication and Enterprise SSO**.

    <%= image_tag("er-config-auth-enterprise-sso-uaa.png") %>

1. To authenticate user sign-ons, your deployment can use one of three types of user database: the UAA server's internal user store, an external SAML identity provider, or an external LDAP server.
    * To use the internal UAA, select the **Internal** option and follow the instructions in the [Configuring UAA Password Policy](../opsguide/pw-policy.html) topic to configure your password policy.
    * To connect to an external identity provider through SAML, scroll down to select the **SAML Identity Provider** option and follow the instructions in the [Configuring PCF for SAML](../opsguide/auth-sso.html#configure-saml) section of the _Configuring Authentication and Enterprise SSO for Elastic Runtime_ topic.
    * To connect to an external LDAP server, scroll down to select the **LDAP Server** option and follow the instructions in the [Configuring LDAP](../opsguide/auth-sso.html#configure-ldap) section of the _Configuring Authentication and Enterprise SSO for Elastic Runtime_ topic.

1. Click **Save**.