> ## Documentation Index
> Fetch the complete documentation index at: https://docs.charlemagnelabs.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Settings

> Configure your organization's name, SSO, and security preferences

The **Settings** page contains organization-level configuration. Only **Org Admins** can access this page.

## Organization Name

Update your organization's display name. This name appears in the dashboard header, email notifications, and team invitations.

## SSO Configuration

Configure Single Sign-On so your team members authenticate through your identity provider instead of username/password. See [SSO Integration](/integrations/sso) for a full setup guide.

Supported protocols:

* **SAML 2.0**
* **OIDC**

## API Keys

API keys authenticate the [Policy-as-Code CLI and Python SDK](/policy-as-code/authentication). They are separate from your dashboard login and from the enrollment key.

| Action           | Description                                                                         |
| ---------------- | ----------------------------------------------------------------------------------- |
| **New API Key**  | Create a key with `read_write` or `read_only` scope and an optional expiration date |
| **Download SDK** | Download the `charley_policy` Python wheel for local installation                   |
| **Delete**       | Revoke a key immediately — existing sessions using it will get `401`                |

Key prefixes:

* `ck_live_` — read/write (can apply policy changes)
* `ck_ro_` — read-only (plan/diff only, safe for CI plan steps)

The raw key is shown **once** at creation. Only a hash is stored. Keys can be identified by their first 12 characters shown in the dashboard.

## Enrollment Key

The enrollment key is a long-lived credential used by Agent Charley to authenticate device registrations during MDM deployment. It is separate from user accounts and API keys.

| Action       | Description                                                                       |
| ------------ | --------------------------------------------------------------------------------- |
| **Generate** | Create a new enrollment key (shown once — copy immediately)                       |
| **Rotate**   | Generate a new key (invalidates the old one immediately)                          |
| **Revoke**   | Delete the key entirely (blocks all new enrollments until a new key is generated) |

<Warning>
  Rotating or revoking the enrollment key will **not** disconnect already-enrolled devices, but any new enrollments using the old key will fail.
</Warning>

## Danger Zone

### Delete Organization

Permanently deletes your organization, all members, all devices, and all telemetry data. This action is irreversible.

You must type your organization name to confirm deletion.