Setup Single Sign On with MS Entra

1. Go to https://portal.azure.com
2. Click 'Microsoft Entra ID'
3. Click 'App registrations'
4. Click 'New registration'
5. Name: Enter 'Glide'
6. Supported account types: Choose "Accounts in this organizational directory only" (Single Tenant)
7. Choose a sub-domain. For example, if you firm were called 'Super Accountants Limited' then you might go for sal - this can not include any period characters.
8. Redirect URI: Enter 'https://[your sub-domain].glideworkpm.com/auth/az/callback'
9. Click 'Register'
10. Navigate to the newly created application which should be listed
11. Note down the 'Application (client) ID' value and send to us (portal upload available)
12. Note down the 'Directory (tenant) ID' value and send to us (portal upload available)
13. Navigate to 'Certificates & secrets'
14. Click 'Client secrets'
15. Click 'New client secret'
16. Enter 'ClientSecret' as the description and copy the value and send to us (portal upload available)
17. Navigate to 'Authentication'
18. Set 'Front-channel logout URL' to 'https://[your sub-domain].glideworkpm.com/logout'
19. Select 'ID tokens' under Implicit grant and hybrid flows
20. Navigate to 'Branding & properties'
21. Set 'Home page URL' to 'https://www.glideworkflow.com'
22. Set 'Publisher domain' to 'https://[your sub-domain].glideworkpm.com', send to us the JSON data needed to be hosted for validation. (Note: this is a one time verification step and we then delete the file)
23. Click 'Home' in the top left of the screen
24. Click 'Microsoft Entra ID'
25. Click 'Enterprise applications'
26. Click 'Glide' on the list of applications
27. Click 'Properties'
28. Set 'Enabled for users to sign-in' to Yes
29. Set 'Assignment required' to Yes
30. Set 'Visible to users' to Yes

Send the information noted down in steps 10, 11 and 15 to us. Send the temporary

JSON data downloaded in step 21 for domain verification to us. The redirect URI limits

the SSO to just the specific instance of Glide that we will configure for you. Should

you wish to ever change the sub-domain that you access Glide via, then this would

need to be updated.

We will then configure your Glide instance to support SSO via Microsoft Entra ID

(formerly Azure AD).

Further steps will be required to setup users, instructions will follow once we have

setup your instance.