Settings — OAuth2 / SSO

Navigate to: Settings → OAuth2 / SSO

Configure enterprise single sign-on so employees authenticate with your existing identity provider instead of a password.

Cross-reference: Full documentation at section 7.6 (covers OIDC and SAML 2.0, setup wizards, pending approval workflow, and session tokens).

Quick steps — OIDC (Google, Okta, Azure AD):

1. Navigate to Settings → OAuth2 / SSO.
2. Click Add SSO Provider.
3. Select a Template (Google, Microsoft, Okta, Auth0, etc.).
4. Fill in Client ID and Secret from your IdP.
5. Copy the Callback URI into your IdP app registration.
6. Toggle Enabled on and click Save.

Quick steps — SAML 2.0 (Microsoft Entra ID):

1. Click Add SSO Provider → select Microsoft Entra ID template.
2. In Step 1, upload the Federation Metadata XML from Azure Portal.
3. In Step 2, copy the SP Metadata URL and ACS URL into your Entra ID Enterprise Application.
4. In Step 3, set display name, domain restriction, and auto-create policy.
5. Click Save & Enable.

How to test:

1. Open an incognito window and navigate to your AgentWatch login page.
2. The SSO button for the new provider should appear.
3. Click it — you should be redirected to your IdP login.
4. After authenticating, you should land on the AgentWatch dashboard.

---