SSO configuration

Avatar
Written by Romain | Updated

Single Sign-On allows you to determine who has access to the UpSlide portal through your existing identity provider.

Benefits

  • Your UpSlide portal managers can access the portal using your organization's identity provider system.
  • Your organization has centralized control over who has access to the portal.

Pre-requisites

  • An identity provider system that is compatible with Open Id Connect.
  • A portal manager access to the portal. If you do not have one yet, email support@upslide.net to get one.

Configuration with Microsoft Entra ID

In Microsoft Entra ID

  1. Create a new App Registration.
  2. Select Accounts in this organizational directory only (Single tenant).
  3. Set the Redirect URI to Web: https://portal.upslide.net/.
  4. In the new registration created, create a new secret in Certificates & secrets. Make sure to copy the Value of the secret.
  5. Take note of the Application (client) ID and the Directory (tenant) ID.

SSO_Azure.png

To finalize the configuration in Azure AD, go to API permissions to Grant admin consent for the tenant.

In the Portal

  1. Log in to the UpSlide Portal, and go to Configuration > Advanced Settings.
  2. Click Add a new configuration.
  3. Input the right information in the different fields:
    • Display name: the name of your choosing.
    • Endpoint Authentication: https://login.microsoftonline.com/Directory (tenant) ID/oauth2/v2.0/authorize
    • Endpoint token: https://login.microsoftonline.com/Directory (tenant) ID/oauth2/v2.0/token
    • Client ID: Application (client) ID.
    • Client Secret: the Value of the secret.

SSO_Add_Config.png

Assign a configuration to a license manager

You can choose which SSO configuration you want for each license manager. To assign a configuration, you can follow these steps:

  1. In the Portal, go to the Portal Access page.
  2. Choose an administrator and click on the pencil to edit their access or create a new one.
  3. In SSO Configuration, you can select the configuration. If no configuration is selected, they will have to use a password to log in.
  4. Click OK.

EditingPortalManagers.png

After you apply the setting, the license managers only need to input their email on the log-in page and click on the Log in button. They will be redirected to your identity provider login page to access the Portal.

Using a different identity provider than Microsoft Entra ID?

As long as your identity provider is compatible with Open Id Connect, the steps above will still apply. You will need to find the equivalent in your own platform:

  • New app registration and secret
  • Application (client) ID and Directory (tenant) ID.
  • Granting consent as admin.

Example:
For AD FS configuration, we recommend you follow the steps of this Microsoft documentation.