Entra SSO Integration

SSO integrations are available by contacting Ubiq support. These enterprise configurations allow for SSO to the Ubiq UI using common enterprise IDP or IAM solutions. This guide is specific to setting up SSO using Microsoft Entra.

User access

After SSO integration, user access to Ubiq still requires that the user is invited to the Ubiq account from the Ubiq "Teams" feature. Setting up SSO will not give all users in the Entra tenant access to Ubiq. It will force all users attempt to login to Ubiq using an email from the tenant domain (i.e. [email protected]) to instead log in via your Entra.

Setup

Setup requires administering your Microsoft Entra tenant to create an application that is used for the SSO.

Register an Application in Entra, following the Entra documentation here https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app
Set the Redirect URI in the Application to https://login.ubiqsecurity.com/login/callback
Generate a Client Secret using Entra documentation here https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app#add-credentials

Once the Entra Application is setup, you'll need to provide this information to Ubiq support to configure the SSO on the Ubiq side:

Microsoft Azure AD Domain (i.e. yourcompany.onmicrosoft.com)
Application (Client) ID
Client Secret