# SSO

Currently Dashworks supports Google SSO, Microsoft Azure SSO, and Okta SSO.  If you would like to request additional providers, please reach out to <support@dashworks.ai>.

{% tabs %}
{% tab title="Okta" %}

### The first steps should be taken within the Okta Admin Panel:

1. Go to **Applications** under **Applications**

<figure><img src="/files/UpNq6sLotbUKb01bEtKw" alt=""><figcaption></figcaption></figure>

2. On the Applications page, select **Browse App Catalog**

<figure><img src="/files/7l6nAfuJKAbTfVbgJlKh" alt=""><figcaption></figcaption></figure>

3. Search for **Dashworks** App and add it

<figure><img src="/files/YLcxzLOGcEmvBf8bM0oO" alt=""><figcaption></figcaption></figure>

4. Add an Application label and click **Done**

<figure><img src="/files/GYh8d7adeiiIgPJL1Cg0" alt=""><figcaption></figcaption></figure>

5. User must specify the Initiate Login URI in the sign-on settings.  In most cases this will be [https://apigw.dashworks.ai/v1/google/auth-url?origin=web.dashworks.ai](https://api.dashworks.ai/v1/google/auth-url?origin=web.dashworks.ai). For on-prem deployment, please contact [**support@dashworks.ai**](mailto:support@dashworks.ai) for the Initiate Login URI.

<figure><img src="/files/thqv58rspUWiiaJ1lnH0" alt=""><figcaption></figcaption></figure>

6. Once the App is added, you will have to assign users to the app under the **Assignments** tab. This will enable to users to log into Dashworks app using Okta. To add users, navigate to the **Assign to People** option under **Assign** option on **Assignments** Page. If you already have a group you can choose the **Assign to Groups** option and assign the entire group.

<figure><img src="/files/l6y76RHs0axTAPPHFGYm" alt=""><figcaption></figcaption></figure>

7. You can add people by clicking the **Assign** option next to their name. After you have all the people click the **Done** button

<figure><img src="/files/tH5ILeTckMJybzpc8eLV" alt=""><figcaption></figcaption></figure>

Note: Make sure all the user profiles have these fields populated:&#x20;

* **Username**
* **First Name,**
* **Last Name**
* **Primary Email**
* **Display Name.**

These fields are required to create profiles in Dashworks. Below is a sample user profile with all required attributes.

<figure><img src="/files/hV2M0Hyb3XUE83nVORF4" alt=""><figcaption></figcaption></figure>

### **Now you're ready to open the Dashworks App:**

1. Log into Dashworks and navigate to Settings -> Security under Workspace settings. Click on **Configure** next to OIDC.

   <figure><img src="/files/2RCdIZgEJJbRZTX6liH0" alt="" width="242"><figcaption></figcaption></figure>
2. You will require **Client ID, Client Secret, and Issuer URL**

<figure><img src="/files/x9F3fZLQt4SuHT9U2lnf" alt=""><figcaption></figcaption></figure>

**Issuer URL** will be of the format <https://your-company.okta.com> for example [*https://dashworks.okta.com*](https://dashworks.okta.com). You can get this from the Okta browser tab.

<figure><img src="/files/5CS2p31HXUw9XVCPwIfe" alt=""><figcaption></figcaption></figure>

Also if URL has **-admin** suffix for example <https://your-company-admin.okta.com>, just remove the suffix and only use <https://your-company.okta.com> (**https\://** is required).

3. Fill in the Client ID, Client Secret, and Issuer URL and click **Submit**

<figure><img src="/files/w8hVNTMIZKRLf27NOYFA" alt=""><figcaption></figcaption></figure>

4. On successfully applying the changes, you should see the following message:

<figure><img src="/files/24Gk4b8f1atQn9Yvil7K" alt=""><figcaption></figcaption></figure>

{% endtab %}

{% tab title="Azure AD" %}

### The first steps should be taken within the Azure Portal.

1. Go to *Azure portal* > *Azure Active Directory*
2. In your Active Directory, click **+Add** option and then click App registration

<figure><img src="/files/3vzJgv6OaA4svSxGXWTB" alt=""><figcaption></figcaption></figure>

3. In the app registration form, give a unique name to your application and keep the default option for Supported account types. For Redirect URI, please set Redirect type as **WEB** and value as <https://dashworks.auth.us-west-2.amazoncognito.com/oauth2/idpresponse>

<figure><img src="/files/5mr9RgJ8FjxWYdVfpwQW" alt=""><figcaption></figcaption></figure>

4. Click on Register and the application will be created. Save the Client ID and Tenant ID (highlighted below) for the newly created app, **this will be required in the SSO creation process on Dashworks app**

<figure><img src="/files/lmcPlljVNM4JMLI8biTC" alt=""><figcaption></figcaption></figure>

5. On the left window, select Certificates and Secrets to create a client secret

<figure><img src="/files/v8hgQWcbz69ojpcFZAF8" alt=""><figcaption></figcaption></figure>

6. Click on **+New Client Secret and** fill in the relevant details in the client secret form.&#x20;

<figure><img src="/files/Hj6UbBNh4uDDN5c8YXma" alt=""><figcaption></figcaption></figure>

Recommended expires value is 24 months, to avoid creating the SSO registration again for 24 months. Add the secret key after filling in the details in the form.

<figure><img src="/files/ubYYEnrndzaAK97BUB9p" alt=""><figcaption></figcaption></figure>

7. Copy the **Value** of the newly created secret key, **this will be required in the SSO creation process on Dashworks app**

### **Now you're ready to open the Dashworks App:**

1. Navigate to Settings --> Security in the navigation bar.&#x20;

<figure><img src="/files/LRErpAUkZfzCTeZIruYk" alt=""><figcaption></figcaption></figure>

2. Input the information below and configure the SSO
3. **Client Id**: Noted in Step 4 above&#x20;
4. **Client Secret:** Noted in Step 7 above&#x20;
5. **Issuer Url:** [**https://login.microsoftonline.com/**](https://login.microsoftonline.com/)**\<tenant\_id>/v2.0,** replace \<tenant\_id> with your org tenant id noted in Step 4 above.
6. Sign out of Dashworks, then click "Sign in with SSO" to sign in with Azure AD.
   {% endtab %}

{% tab title="Google" %}

Google SSO does not require additional setup. You can simply select Google as your SSO provider in the “Single sign-on” page within Dashworks.

If you have a Google Workspace you will be prompted with Google SSO both when you first create an account:

<figure><img src="/files/vMHYdSNP97ZqRqs4NNmh" alt=""><figcaption></figcaption></figure>

You will also be prompted to use SSO if you are logging back in after logging out:

<figure><img src="/files/cr0fJj8R4aYzIncZO0ly" alt=""><figcaption></figcaption></figure>
{% endtab %}
{% endtabs %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://support.dashworks.ai/admin/sso.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
