organization settings

modules/ROOT/pages/platform/security/single-sign-on.adoc

@@ -177,10 +177,24 @@ Accessing Aura with SSO requires:
 * Authorization Code Flow
 * A publicly accessible IdP server
 
-To configure SSO, go to *Aura Console > Settings > SSO Configuration.*
-
 To create an SSO Configuration either a Discovery URI or a combination of Issuer, Authorization Endpoint, Token Endpoint and JWKS URI is required.
 
+== Create a new SSO configuration
+
+When you're looking at a project, select the cog wheel from the breadcrumb navigation [Figure 1].
+
+.Select Organization settings via the cog wheel
+[.shadow]
+image::organizationsettings.png[]
+
+Then, from the organization settings, select *SSO Configuration* to bring up the *New SSO Configuration* dialogue. [Figure 2]. 
+Use the check boxes to "Use as a log in for the Organization" or "Use as login method for instances with projects in this Org".
+You can check both check boxes, for Organization and Instance access here.
+
+Enter basic SSO config information (this can all be retrieved from the IdP).
+Entering the Discovery URI will pre-fill the fields below. 
+If this is not known these fields can be completed manually.
+
 .SSO configuration
 [.shadow]
 image::sso.png[sso,640,480]