Set up SSO
This guide walks through configuring single sign-on (SSO) so your organization's users can sign in with a corporate identity provider instead of individual Google or GitHub OAuth.
Configure Azure AD, GitHub, or Google as a custom identity provider for your Vantage organization.
Configure the identity provider in Vantage
Open Organization Settings
Click the Settings gear icon in the bottom-left sidebar. Select Organization Settings.
Open the Custom Identity Provider section
Scroll to the Custom Identity Provider section. Click Add Custom Identity Provider.
Fill in the required fields
Fill in the required fields:
| Field | Required | Notes |
|---|---|---|
| Identity Provider | Yes | Select Azure, GitHub, or Google |
| App Identifier | Azure only | The unique identifier for the Azure AD tenant |
| Client ID | Yes | The client ID from your identity provider |
| Client Secret | Yes | Stored securely; cannot be viewed after creation |
| Redirect URI | -- | Pre-filled; copy this value into your identity provider's configuration |
| Organization Domain | Yes | The email domain for your organization (for example, example.com) |
Save the configuration
Click Add Custom Identity Provider to save.
Success looks like this: the identity provider is registered, test authentication succeeds, and users can sign in through the configured SSO provider.
Configure your identity provider
Copy the Redirect URI shown in the Vantage dialog and add it to your identity provider's OAuth configuration:
- Azure AD -- add the redirect URI under App registrations > Authentication > Redirect URIs
- GitHub -- add it under Settings > Developer settings > OAuth Apps > Authorization callback URL
- Google -- add it under APIs & Services > Credentials > OAuth 2.0 Client > Authorized redirect URIs
Test the SSO login
Open an incognito window
Open a new incognito/private browser window.
Navigate to Vantage
Navigate to app.vantagecompute.ai.
Sign in with the configured domain
Sign in using an account on the configured domain.
Verify authentication
Verify the user is authenticated and lands on the dashboard.
Existing users are not automatically switched to the new identity provider. Each user must sign in using the new provider on their next login. The platform matches users by email domain.
Remove an identity provider
Navigate to Custom Identity Provider
Navigate to Organization Settings > Custom Identity Provider.
Remove the provider
Click Remove Identity Provider and confirm the deletion.
Users who were signing in via the removed provider will need to use Google or GitHub OAuth on their next login.