SSO Integration Setup
Pixaera supports both OIDC (OAuth 2.0) and SAML 2.0 single-sign on authentication.
Setting up a new SSO integration requires only setting up the correct configuration. We would need the following configuration for the corresponding protocol the customer is using:
Configuration needed for OIDC SSO:
- Client ID
- Client Secret
- Access Token URI
- Authorization URI
Configuration needed for SAML SSO:
- Entry Point URI
- Certificate
- SAML Name ID/Identifier Format
- SAML XML Response
In order for customers to generate the SAML configuration and setup Pixaera as an application in their IDP, they usually need the following information to be setup:
Issuer/Entity ID: https://api.staging.pixaera.com
(Staging/UAT) Callback URL: https://api.staging.pixaera.com/saml/callback
(Staging/UAT)
Issuer/Entity ID: https://api.pixaera.com
(Production) Callback URL: https://api.pixaera.com/saml/callback
(Production)
Using the dynamic SSO process setup, once the configuration is imported into Pixaera, users will be automatically redirected to their SSO company page to login and automatically have their accounts created (if auto user creation is enabled).