To add SSO login on your custom domain, you need to set up your Identity Provider (IdP) for IXON Cloud. This article goes into specifics on how you set up Keycloak.

• Create a new SSO Client
• Send us the required information

Create a new SSO Client

The IXON Cloud needs to be registered as an app in your Keycloak environment.

1. Before you start, check the main article SSO login on your custom domain for preparation steps.
2. Open Keycloak and log in.
   • The following instructions are based on Keycloak server version 26.5. While the steps are largely the same in other versions, the interface may deviate from the screenshots.
3. Select the correct realm.
4. In the left menu, under Manage, go to Clients.
   
5. Click on Create client.
6. Under General settings, select and enter the following.

   Client type	Select OpenID Connect.
   Client ID	Enter a descriptive name. For example, "ixon-cloud-sso".
   Name	Enter a descriptive name. For example, "IXON Cloud SSO".

   
7. Click Next.
8. Under Capability config, enter the following.

   Client authentication	Turn this setting on.
   Authorization	Leave this setting off.
   Authentication flow	Select Standard flow.
   PKCE Method	Leave this setting empty.
   Require DPrP bound tokens	Leave this setting off.

   
9. Click Next.
10. Under Login settings, enter the following.

    Valid redirect URIs	https://api.ayayot.com/sso/redirect/2
    Other fields	Leave empty.

    
11. Click Save.
12. You will automatically be redirected to your newly created client's details. In the top right corner, click on Action and select Download adapter config.
    
13. As Format option, select Keycloak OIDC JSON or keycloak-oidc-keycloak-json.
14. Click Download.

Send us the required information

You've prepared your Keycloak environment. Now, we require specific information from your environment to complete the SSO login button setup.

15. Contact us and send us the following information securely. If you do not already have a means to send data securely, you can create an encrypted zip file and send us the password separately.

    IXON Cloud company name	This information can be found in IXON Cloud at Admin > Identity. Enter your company name.
    IXON Cloud company ID	This information can be found in IXON Cloud at Admin > Identity. Enter your company ID.
    Provider	Keycloak
    OpenID Connect Details	Attach the downloaded adapter config from step 14.
    Login name	The text that will be displayed in the SSO login button. Enter the text you would like to display. This needs to start with "Log in with".
    Login icon	The icon that will be displayed in the SSO login button. Specify the icon you would like to display. In case of no icon, state "No icon". In case of a custom icon, like your company logo, attach it in .png format.
    Test credentials	We request (temporary) login credentials to validate the SSO login. While this is optional, it has proven to be beneficial and often speed up the deployment of a functional SSO login button. If you choose to not provide credentials, you will need to validate the SSO login once we have completed the setup.

16. Please wait for us to process your request and complete the setup. This may take several business days.