Skip to main content

SSO (Console Sign‑In)

Let your team sign in to the DashX console with Microsoft Entra ID (Azure AD) instead of DashX passwords. Console SSO uses OIDC (OpenID Connect, Authorization Code + PKCE) and supports just‑in‑time (JIT) provisioning — a new user is created on first sign‑in with the role you choose.

What you configure​

In Settings → Security & Access → SSO:

  • Enable — off by default.
  • Tenant ID (GUID) and Application (client) ID (GUID) — from your Entra app registration.
  • Client secret — from the app registration.
  • Allowed email domains — only these domains may sign in (e.g. acme.com, acme.io).
  • Default role for JIT‑provisioned users — Viewer / Operator / Admin.
  • Restrict JIT to these IdP groups (optional) — only members of these Entra groups (by display name) get auto‑provisioned.

The page also shows the exact Redirect URI to register in Entra (e.g. https://app.dashxtech.com/api/auth/sso/callback).

Set it up​

Follow the step-by-step guides: Console SSO with Entra (OIDC) and Portal SSO with Entra (SAML).

note

This is for console admins. The end‑user support portal uses SAML — see Portal SSO (also covered in the Entra guide). DashX Connect has its own SSO under Connect SSO.