Set up SSO

This guide walks through configuring single sign-on (SSO) so your organization's users can sign in with a corporate identity provider instead of individual Google or GitHub OAuth.

Prerequisites

• A Vantage account with Organization Admin permissions
• Admin access to your identity provider (Azure AD, GitHub, or Google)

Configure the identity provider in Vantage

1. Click the Settings gear icon in the bottom-left sidebar.
2. Select Organization Settings.
3. Scroll to the Custom Identity Provider section.
4. Click Add Custom Identity Provider.
5. Fill in the required fields:

Field	Required	Notes
Identity Provider	Yes	Select Azure, GitHub, or Google
App Identifier	Azure only	The unique identifier for the Azure AD tenant
Client ID	Yes	The client ID from your identity provider
Client Secret	Yes	Stored securely; cannot be viewed after creation
Redirect URI	--	Pre-filled; copy this value into your identity provider's configuration
Organization Domain	Yes	The email domain for your organization (for example, example.com)

6. Click Add Custom Identity Provider to save.

Configure your identity provider

Copy the Redirect URI shown in the Vantage dialog and add it to your identity provider's OAuth configuration:

• Azure AD -- add the redirect URI under App registrations > Authentication > Redirect URIs
• GitHub -- add it under Settings > Developer settings > OAuth Apps > Authorization callback URL
• Google -- add it under APIs & Services > Credentials > OAuth 2.0 Client > Authorized redirect URIs

Test the SSO login

1. Open a new incognito/private browser window.
2. Navigate to app.vantagecompute.ai.
3. Sign in using an account on the configured domain.
4. Verify the user is authenticated and lands on the dashboard.

note

Existing users are not automatically switched to the new identity provider. Each user must sign in using the new provider on their next login. The platform matches users by email domain.

Remove an identity provider

1. Navigate to Organization Settings > Custom Identity Provider.
2. Click Remove Identity Provider and confirm the deletion.

Users who were signing in via the removed provider will need to use Google or GitHub OAuth on their next login.

Related

• Get started with IAM
• Manage IAM
• Account settings