# Configuring Single Sign-On (SSO) for Gladstone Reporting (Sisense)

HTML version: [Configuring Single Sign-On (SSO) for Gladstone Reporting (Sisense)](https://support.gladstonesoftware.cloud/sso/configuring-single-sign-on-sso-for-gladstone-reporting-sisense)

## Problem
Users need to configure Single Sign-On (SSO) for Gladstone Reporting (Sisense) using Azure Active Directory to enable secure and seamless authentication.

## Resolution

1. Log in to your Azure account.
2. Expand the left-hand menu and go to **Azure Active Directory**.
3. Select **Enterprise applications**.
4. Under the **All Applications** section, select **New application**.
5. Choose **Create your own application** for the purpose "Integrate any other application you don’t find in the gallery", and name it **Sisense**.
6. Under **Overview > Assign users and groups**, configure access permissions for your SSO integration as needed.
7. Return to **Overview** and switch to **Set up single sign-on**.
8. Select the **SAML** type for SSO.
9. Edit **Basic SAML Configuration** with the following settings:

    | Name       | Value                                                                                 |
    |------------|---------------------------------------------------------------------------------------|
    | Identifier (Entity ID) | onelogin_saml                                                                      |
    | Reply URL (Assertion Consumer Service URL) | `https://gladstone.sisense.com/<tenantname>/api/v1/authentication/login_saml_callback`<br>Replace `<tenantname>` with your tenant name provided by Gladstone. |

10. Save the settings.
11. Go to **Edit User Attributes and Claims**.
12. Use **Add New Claim** to add the required user attribute claims (details to be provided according to your organisation's requirements).
13. Return to the **Single Sign-On** page and copy the following parameters:
    - Login URL
    - Logout URL
    - Certificate (Base64)
14. Fill in the **Relay State** field (even though it is marked as optional):
    - Set RelayState to: `https://gladstone.sisense.com/<tenantname>/app/main#/home`
    - Replace `<tenantname>` with your tenant name provided by Gladstone.
15. Provide the **Login URL**, **Logout URL**, and **Certificate (Base64)** to Gladstone to complete the configuration.

## Notes
- The `<tenantname>` should be replaced with the value provided to you by Gladstone.
- RelayState helps direct users to the main page after signing in via SSO.
- If you require custom user attribute claims, consult your organisation's requirements or Gladstone support.