> This is the Markdown of a Backed Help Centre page, https://admin.backed.giving/help/integrations/faq-integrations.md. Every page is listed at https://admin.backed.giving/help/llms.txt.

> This page uses Backed's default terms, such as Funding Round and Application Template. An organisation may rename them, so read each as your organisation's own term if you've renamed it.

## Should we use SAML 2.0 or OpenID Connect?

Use the protocol your identity provider's application is set up for. Microsoft Entra ID, Okta and
Google Workspace support both. OpenID Connect needs no metadata file: choose your provider, enter
the `Client ID` and `Client secret`, and register the `Redirect URI`. See
[Single sign-on](single-sign-on.md).

## Why can't I change the protocol?

The protocol can be changed only while SSO is disabled. While it is on, the page says
`Disable SSO to change the protocol.`

## Why can't I turn on SSO-only mode?

SSO has to be configured, and you have to have signed in with SSO yourself first. This stops you
locking everyone out.

## Will people lose access when we turn on SSO-only mode?

Not straight away. Anyone already signed in stays signed in until their session ends. From their
next sign-in, the people it covers must use SSO.

## Can I see a client secret again?

No. Backed shows an API `Client Secret` once, when you create the credential, and never shows a
stored OpenID Connect `Client secret`. Create a new credential, or enter a new secret, to replace
one.

## Can an AI assistant change our data?

No. Assistants connected through MCP can only read, and only what the connected person can already
see. See [Connect an AI assistant with MCP](mcp.md).

## Can we connect Xero, QuickBooks or MYOB?

Yes, one at a time. Each has its own section under `Settings > Profile and terms`, and needs the
`Can manage Integrations` permission to connect. While one is connected, the other two say which to
disconnect first. See [Xero](xero.md), [QuickBooks Online](quickbooks.md) and [MYOB](myob.md).

## Can we connect our CRM?

If your CRM is FundraiserOne, yes: Backed's team switches the FundraiserOne integration on for your
organisation, and each applicant's contact details are sent to it. See
[FundraiserOne](fundraiser-one.md). Any other CRM can read and write your data through the API. See
[API access](api-access.md).

## Where is the API reference for our developer?

On the developer site, at `https://backed.giving/developers`, which needs no sign-in. It has the
reference for every route, guides, the webhook event catalogue, the changelog and the OpenAPI
document. See [Developer documentation](developer-documentation.md).

## Does Backed send money?

No. Backed records payments and makes files for your bank or finance system, such as a bank file or
an Accredo import file, but the money moves only when your finance team pays it. See
[Accredo](accredo.md).

## Where can I see what an integration sent, and whether it worked?

On `Settings > Profile and terms > Integration logs`. Every attempt is listed, failed ones included,
and `Show details` names its trigger, attempt, the other system's reference, the record and the
error. Entries can't be edited or deleted. See [Integration logs](integration-logs.md).