# SSO enrollment (user account)
{% hint style="info" %}
Please, first ensure that your HES administrator [enabled the SSO option for your user](/primary-setup-admin-guide/sso-configuration.md).
{% endhint %}
There are 2 options for HES accounts:
1. Register app for [two-factor authentication](/user-guide/android-guide/login-with-hideez-authenticator/sso-login/sso-login-as-a-second-factor.md).
2. [Passwordless authentication](/user-guide/android-guide/login-with-hideez-authenticator/sso-login/sso-passwordless-login.md) with Hideez Authenticator.
If your administrator [enabled the second-factor requirement](/user-guide/android-guide/software-key-enrollment/sso-enrollment/sso-enrollment-admin-account.md#enabling-second-factor-for-user-account), you have to follow the [first](#enrollment-as-second-factor) part of this instruction, otherwise - the [second](#enrollment-for-passwordless-login) one.
### Enrollment as the second factor
1. Open the email from the HES in your mailbox and follow the link in it.
2. Follow the screen guide and set the password.\
\
\
\
3. Then click the "Use Hideez Authenticator" button.\
\
4. Here you can download Hideez Authenticator for your OS from Google Play or App Store via corresponding links.\
\
5. Open Hideez Authenticator and scan the QR code on HES.\
\
6. Confirm SSO enrollment on Hideez Authenticator.\
\
7. That is all set. Now you can log in with the Hideez Authenticator as a second factor.
### Enrollment for passwordless login
1. Open the email from the HES in your mailbox and follow the link in it.\
\
2. Then click the "Use Hideez Authenticator" button.\
\
3. Here you can download Hideez Authenticator for your OS from Google Play or App Store via corresponding links.\
\
4. Open Hideez Authenticator and scan the QR code on HES.\
\
5. Confirm SSO enrollment on Hideez Authenticator.\
\
#### If you already registered a security key for SSO, you can register mobile app by following these steps:
1. Go to the "Hideez Authenticator" section and click the "Register Hideez Authenticator" button.
\
\
Here you can download Hideez Authenticator for your OS from Google Play or App Store via corresponding links.\
\
2. Open Hideez Authenticator and scan the QR code on HES.\
\
3. Confirm SSO enrollment on Hideez Authenticator.\
\
4. That is all set. Now you can log in with the Hideez Authenticator.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://authenticator.hideez.com/user-guide/android-guide/software-key-enrollment/sso-enrollment/sso-enrollment-user-account.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.