Xelto supports SSO authentication with the following identity providers:

• Google - Organizations using Google Workspace

• Microsoft Entra ID - Organizations using Microsoft 365 / Azure

• Okta / Auth0 - Organizations using Okta Identity Platform

Once configured, your users will be able to log in to Xelto using their existing corporate credentials.

Prerequisites

Before you begin, ensure you have:

•  Administrator access to your identity provider (Google, Azure, Okta)

•  The organization name you want to use (e.g., acme)

•  Access to configure applications in your identity provider

After successful setup, users will be able to log in to the system using the provided SSO name and the configured identity provider. 

Create OAuth Credentials

1. Go to Google Cloud Console

2. Select your organization's project (or create a new one)

3. Navigate to APIs & Services → Credentials

4. Click Create Credentials → OAuth client ID

5. Select Web application

6. Configure:

   • Name: Xelto SSO

   • Authorized redirect URI: https://t7uq4ebbhvpci.azurewebsites.net/signin-google

7. Click Create

8. Copy the Client ID and Client Secret

For Mobile App Support (Optional)

If your users will access Xelto from iOS devices:

1. Create another OAuth client ID

2. Select iOS as application type

3. Enter the Xelto iOS Bundle ID (provided by Xelto support)

4. Copy the iOS Client ID

Information to Provide to Xelto

Register Application

1. Go to Azure Portal

2. Navigate to Microsoft Entra ID → App registrations

3. Click New registration

4. Configure:

   • Name: Xelto SSO

   • Supported account types: Select based on your needs:

     • Single tenant: Only users from your organization

     • Multi-tenant: Users from any Azure AD organization

   • Redirect URI:

     • Platform: Web

     • URL: https://t7uq4ebbhvpci.azurewebsites.net/signin-entraid

5. Click Register

Copy Application IDs

After registration, from the Overview page, copy:

• Application (client) ID

• Directory (tenant) ID

Create Client Secret

1. Go to Certificates & secrets

2. Click New client secret

3. Add description: Xelto SSO

4. Select expiration (recommended: 24 months)

5. Click Add

6. Important: Copy the secret value immediately (it won't be shown again)

Configure API Permissions

1. Go to API permissions

2. Click Add a permission → Microsoft Graph → Delegated permissions

3. Add these permissions:

   • openid

   • profile

   • email

4. Click Grant admin consent for [Your Organization]

Information to Provide to Xelto

Create Application

1. Log in to Okta Admin Console

2. Go to Applications → Applications

3. Click Create App Integration

4. Select:

   • Sign-in method: OIDC - OpenID Connect

   • Application type: Web Application

5. Click Next

Configure Application

1. Fill in:

   • App integration name: Xelto SSO

   • Grant type: ✅ Authorization Code (checked)

   • Sign-in redirect URIs: Callback URL provided by Xelto support

   • Sign-out redirect URIs: (optional) Logout URL provided by Xelto support

2. Under Assignments:

   • Select who can access the application

   • Recommended: Limit access to selected groups for better control

3. Click Save

Copy Credentials

From the application's General tab, copy:

• Client ID

• Client Secret

Your Okta domain is visible in the URL: https://your-domain.okta.com

Information to Provide to Xelto