How to enable Single Sign-On (SSO)?

Single Sign-On (SSO) is an identity and access management security method that requires identification via your own Identity Provider. The primary purpose of SSO is to enhance security by adding an extra layer of protection by managing the username and password via your own central Identity system. It also allows system administrators to revoke access to Spotler FeedbackPro by simply limiting or disabling the user within your own system. We do not provide user provisioning via this route.

We are using the OpenID standard and support the following Identity Providers:

• Azure/Entra
• SurfConext

How do I enable SSO on Spotler FeedbackPro?

Azure/Entra

1. Navigate to Azure Active Directory and copy the Tentant ID for step 7.
2. Select App registrations in the sidebar and click on New registration.
3. Enter a name and the Redirect URi provided by Spotler and click Register.
4. On the following page, copy the Application (client) ID for step 7. Next, click Add a certificate or secret next to Client credentials.
5. Add a new client secret, select an expiration period and copy the secret value for step 7. We need a new secret before this one expires. Write this down in your monitoring tool. 
6. Set the API permissions from the list below, with Admin consent required: no
   • email
   • offline_access
   • openid
   • User.Read
   • profile
7. In order for Spotler FeedbackPro to configure SSO, we need the:
   • Tenant ID from Step 1
   • Application (client) ID from Step 4
   • Secret value from Step 5