# Structural Cloud notes

Here are some items to be aware of if you use Structural Cloud.

## Structural Cloud locations

We host instances of Structural Cloud in the following AWS Regions:

* `us-east-1`  - US East (N. Virginia)
* `eu-central-1` - Europe (Frankfurt)

We can add additional Regions by request.

## Structural Cloud security

For details about security in Structural Cloud, go to the [Structural Cloud section of the Tonic Security site](https://app.gitbook.com/s/wQloIBJ3L8Y67Vy4o7dR/tonic.ai-applications/structural).

## Structural access to database servers

If you allowlist access to your databases, then add the [Structural static IP addresses](https://docs.tonic.ai/app/frequently-asked-questions#i-allowlist-access-to-my-database.-what-are-your-static-ip-addresses) to your allowlist. 

## Source and destination databases <a href="#cloud-checklist-source-destination-db" id="cloud-checklist-source-destination-db"></a>

Source databases contain the original data for Structural data generation. Structural writes the transformed data to a destination database.

[overview-for-database-administrators](https://docs.tonic.ai/app/setting-up-your-database/overview-for-database-administrators "mention") contains an overview of the requirements for Structural source and destination databases.

## Account Admin assignment <a href="#cloud-checklist-account-admin" id="cloud-checklist-account-admin"></a>

At least one account in your organization must be granted the built-in Account Admin global permission set, so that you can:

* [Manage organization users.](https://docs.tonic.ai/app/admin/tonic-user-access/users-tonic-managing)
* [Download the usage report.](https://docs.tonic.ai/app/admin/tonic-monitoring-logging/tonic-data-usage-report)
* [Configure organization-level environment settings.](https://docs.tonic.ai/app/admin/environment-variables-setting/structural-cloud)

By default, the first account in an organization is granted the Account Admin permission set. They can then grant the Account Admin permission set to other users in the organization.

For more information, go to [granting-account-admin-access-for-a-structural-cloud-organization](https://docs.tonic.ai/app/admin/tonic-user-access/permissions/granting-account-admin-access-for-a-structural-cloud-organization "mention").

## SSO support in Structural Cloud

For single sign-on (SSO), Structural Cloud supports the following providers:

* [Okta](https://docs.tonic.ai/app/admin/tonic-user-access/single-sign-on/okta)
* [OpenID Connect (OIDC)](https://docs.tonic.ai/app/admin/tonic-user-access/single-sign-on/oidc)
* [SAML](https://docs.tonic.ai/app/admin/tonic-user-access/single-sign-on/saml)

For information on how to enable and configure SSO, go to [sso-cloud](https://docs.tonic.ai/app/admin/tonic-user-access/single-sign-on/sso-cloud "mention").