# Orbit login service

To use Security Assertion Markup Language (SAML) Single Sign-On (SSO) for user authentication in Orbit, you must first configure an Orbit Login Service.

1. Run the **Orbit Updater Configurator** as Administrator.
2. On the **Login Service** tab, confirm **Update** shows **Update if not installed or already installed and a newer version is available**.
3. Choose the **Service directory** (default: `%ProgramFiles%\Apteco\OrbitLoginService`).
4. Choose the **Service name** (default: `OrbitLoginService`).
5. Save changes and restart the **Orbit Updater Service** to pick up the changes.
6. Confirm **OrbitLoginService** appears in Windows Services and is running.
7. Right-click on the **OrbitLoginService** and select **Properties**.
8. > **Warning**
   >
   > If you don't complete step 8, you will see the following error in the Orbit Login Service logs:
   >
   > Text Only
   >
   > ```text
   > System.Security.Cryptography.CryptographicException: Error occurred during a cryptographic operation.
   > ```

## Orbit API Configurator

To set up the Login Service in the Orbit API Configurator, enter the following values under **External login service options**:

| Setting | Value |
| --- | --- |
| Base URL | `https://localhost:5005` |
| Issuer | `https://AptecoLoginApi` |
| Audience | `https://AptecoLoginApi` |
| Secret key | `VerySecretAptecoJWTKey` |

> [!WARNING]
>
> Change the **Secret Key** from the default value before using in production.

**Save** and close the Orbit API Configurator.