To add SSO login on your custom domain, you need to set up your Identity Provider (IdP) for IXON Cloud. This article goes into specifics on how you set up Salesforce.

• Create a new External Client App
• Send us the required information

Create a new External Client App

The IXON Cloud needs to be registered as an app in your Salesforce environment.

1. Before you start, check the main article SSO login on your custom domain for preparation steps.
2. Open Salesforce and log in.
3. Go to Salesforce Setup.
4. In the left menu, go to Apps > External Client Apps > External Client App Manager.
5. Click on New External Client App.
6. Under Basic Information, select and enter the following.

   External Client App Name	Enter a descriptive name. For example, "IXON Cloud SSO".
   API name	Leave the automatically generated name.
   Contact e-mail	Enter meaningful e-mail address.
   Distribution State	Select Local.
   Other fields	Can be left empty.

   
7. Under API (Enable OAuth Settings), select the following.

   Enable OAuth	Turn this setting on.

8. Under API > App Settings, select and enter the following.

   Callback URL	https://api.ayayot.com/sso/redirect/2
   Selected OAuth Scopes	Select Access the identity URL service and Access unique user identifiers.
   Configure ID token	Turn this setting on.
   Include standard claims	Turn this setting on.
   Other fields	Can be left empty.

   
9. Under API > Flow Enablement, leave all fields empty.
    
10. Under API > Security, select and enter the following.

    Require secret for Web Server Flow	Turn this setting on.
    Require secret for Refresh Token Flow	Turn this setting on.
    Other fields	Leave empty.

    
11. Under all other settings, leave everything empty.
    
12. Click Create.
13. You will automatically be redirected to your newly created External Client App's details.
14. Open the Settings tab.
     
15. Under OAuth Settings, click on Consumer Key and Secret.
    
    • You may be requested to verify your identity by logging in again.
      
16. Copy the Consumer Key and Consumer Secret. You will need them later.
    

Send us the required information

You've prepared your Salesforce environment. Now, we require specific information from your environment to complete the SSO login button setup.

17. Contact us and send us the following information securely. If you do not already have a means to send data securely, you can create an encrypted zip file and send us the password separately.

    IXON Cloud company name	This information can be found in IXON Cloud at Admin > Identity. Enter your company name.
    IXON Cloud company ID	This information can be found in IXON Cloud at Admin > Identity. Enter your company ID.
    Provider	Salesforce
    Instance URL	Enter your Salesforce instance URL. This is the following URL. Replace INSTANCE_NAME with your Salesforce instance name. https://INSTANCE_NAME.my.salesforce.com
    Client ID	Enter your Consumer Key from step 16.
    Client secret	Enter your Consumer Secret from step 16.
    Login name	The text that will be displayed in the SSO login button. Enter the text you would like to display. This needs to start with "Log in with".
    Login icon	The icon that will be displayed in the SSO login button. Specify the icon you would like to display. In case of no icon, state "No icon". In case of a custom icon, like your company logo, attach it in .png format.
    Test credentials	We request (temporary) login credentials to validate the SSO login. While this is optional, it has proven to be beneficial and often speed up the deployment of a functional SSO login button. If you choose to not provide credentials, you will need to validate the SSO login once we have completed the setup.

18. Please wait for us to process your request and complete the setup. This may take several business days.