Single Sign-On (SSO) Setup Guide

Make it simple for everyone in your organization to sign in to AppNavi using the same corporate credentials you already use every day. Follow these steps to turn on SSO, enter a few settings, and you’re done.

1. Prerequisites

   Before you begin, confirm that:
   • You have Tenant Admin access in AppNavi.
   • Your AppNavi tenant is active.
   • You’ve registered an application in your identity provider (Azure AD or Okta) and collected:
     • Client ID
     • Client Secret
     • Metadata (Discovery) URL
     • Redirect URI (we’ll provide this in Step 3)
     • Scopes: usually openid profile email

2. Turn On SSO

   • Sign in to the AppNavi portal with your Tenant Admin account.
   • In the left menu, click Manage Tenant.
   • On the Settings tab (the first tab), scroll to the Authentication section.
   • Flip the Enable SSO switch to On.
   • As soon as you enable SSO, a new OAUTH tab appears next to Settings.

3. What You’ll Need

• Tenant Owner account in AppNavi (this is the admin user)
• An active tenant in AppNavi
• A prepared app in your identity service (Azure AD or Okta) that gives you:
  • Client ID (a long code)
  • Client Secret (a secret code)
  • Metadata URL (a web address where AppNavi checks settings)
  • Scopes (just type openid profile email)

4. Configure Your Identity Provider

   
   

   Field	Value
   Callback (Redirect) URI	https:///ed707f9c/signin-oidc (replace with your actual domain)
   Authorization URI	https:///oauth2/v1/authorize
   Token URI	https:///oauth2/v1/token
   Userinfo URI	https:///oauth2/v1/userinfo
   Issuer	https:///oauth2/default
   Client ID	your-client-id
   Client Secret	your-client-secret
   Scopes	openid email
   Token Endpoint Method	GET

Note: Some IdPs call “Redirect URI” or “Reply URL” what AppNavi labels Callback URI.

4. Test Your SSO

   1. Browse to:

      https://<your-appnavi-domain>/Login/tenant/<tenantId>
      

   2. Click Login with SSO.
   3. You’ll be sent to your IdP’s sign-in page enter your corporate credentials.
   4. After successful authentication, you’ll be redirected back and logged in automatically.