# Admin Setup

Admin setup runs the first time you sign in. The flow has three steps. Plan on under 10 minutes end-to-end.

{% hint style="info" %}
Cakewalk staff creates your company instance and admin account before you sign in. The setup flow below picks up from there.
{% endhint %}

***

### 📖 **What you'll need**

* Your organization name, domain and chosen SSO provider (Google, Microsoft or Okta).
* Admin credentials for your company's HRIS or IdP (if you're syncing Users automatically).
* Admin credentials for your Google Workspace (if you're syncing Connections and Agents automatically).

:bulb: *Why this matters:* The more you sync up front, the less manual entry. You can always run the manual path and upgrade to a sync later.

***

### 1️⃣ Step 1: Company Setup

Set the basics so the product knows your company context.

1. Sign in for the first time. The setup flow opens automatically.
2. Enter your **organization name** (required).
3. Enter your **organization domain** (required).
4. Select your **SSO provider** (Google, Microsoft or Okta: required). Username and password are also supported as a fallback.
5. Click **Continue**.

:bulb: *Why this matters:* Org name and domain anchor every other entity in the product. SSO scopes how your team signs in.

***

### 2️⃣ Step 2: Identity Source & Users

Import your team and choose who to invite.

You have two paths. Pick one. You can upgrade from manual to a sync later (one-way).

**Path A: Sync from your company's HRIS or IdP**

1. Click **Connect identity source**.
2. Choose your provider from the list of 100+ supported HRIS and IdP systems.
3. Authenticate and grant Cakewalk read access.
4. Cakewalk syncs all users with their properties (team, role, manager).
5. Review the list and select who to invite. Set role per user (**Admin** or **employee**, default employee).
6. Click **Continue**.

**Path B: Add Users manually**

1. Click **Add manually**.
2. Enter each User's email, name and role (**Admin** or **employee**, default employee).
3. Click **Continue**.

{% hint style="info" %}
You can upgrade from manual entry to a sync later by going to the identity source settings. The upgrade overwrites your manual entries.
{% endhint %}

:bulb: *Why this matters:* Cakewalk uses HRIS attributes (department, title, location) as policy inputs. Syncing now means richer Custom Policies later.

***

### 3️⃣ Step 3: Connections & Agents

Populate your company's Connection and Agent catalogs.

You have two paths. Pick one at the start of the step.

**Path A: Sync from Google Workspace**

1. Click **Sync from Google Workspace**.
2. Authenticate with an admin Google Workspace account.
3. Cakewalk imports every discovered Connection and Agent in bulk.
4. Status updates appear as the import runs. You can explore the rest of the product while it works.
5. Once complete, clean up unwanted entries from All Connections or All Agents.

**Path B: Add Connections and Agents manually**

1. Click **Add manually**.
2. From the **App Catalog**, multi-select the Connections you want to make available.
3. From the **Agent Catalog**, multi-select the Agents you want to approve.
4. Click **Continue**.

{% hint style="info" %}
Cakewalk supports HTTP-streamable MCP transport over OAuth only (around 200 Connections at launch). Microsoft 365 and Okta support follows soon after launch.
{% endhint %}

:bulb: *Why this matters:* Connections and Agents in your company's catalog become the menu employees pick from when they run their own setup.

***

### ✅ What Happens After Setup

Once you finish Step 3:

* Default Policies auto-apply per action type:
  * **Read** = auto-approve for low-risk Connections; require approval at Confidential and above.
  * **Write** = require approval.
  * **Destructive** = deny.
  * **External** = require approval.
* Your invited employees can sign in and run [Employee Setup](/docs/ai-agent-access/introduction/get-going-with-agent-access/employee-setup.md).
* Every employee sees a fully populated **My Connections** and **My Agents** with the entries from your company's catalog.
* You can manage Connections, Agents, Users and Policies from the main navigation at any time.

***

### 👉 **Where to go next**

* Tune your defaults: open Settings → Policies.
* Watch your team come online: open Users.
* See what employees experience: [Employee Setup](/docs/ai-agent-access/introduction/get-going-with-agent-access/employee-setup.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://www.cakewalk.security/docs/ai-agent-access/introduction/get-going-with-agent-access/admin-setup.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.