Configuration in your SSO provider

Before you can enable single sign-on (SSO) in Fabricate, in your SSO provider, you must set up a dedicated app or client for Fabricate.

Fabricate supports any OIDC provider that supports the Authorization Code Flow mode, such as:

• Okta
• Keycloak
• Microsoft Entra ID (previously Azure Active Directory). For details on the required configuration in Microsoft Entra ID for Fabricate SSO, go to Microsoft Entra ID configuration.
• Google
• Auth0

URLs for the configuration

The provider configuration includes the following values:

• Initiation URL - From your SSO provider dashboard.
• Sign-in redirect URL - https://fabricate.tonic.ai/sso/callback
• Sign-out redirect URL - https://fabricate.tonic.ai/

Values to note for the Fabricate configuration

After you create the app or client, note the following values that are needed to configure the SSO in Fabricate:

• Issuer URL
• Client ID
• Client secret

Granting Fabricate access to your SSO users

Within your SSO provider, to enable SSO users to join your Fabricate account, you must grant them access to the Fabricate application.