How to set up single sign on (SSO) for simulation access

The Shoreline simulation app supports single sign on (SSO) using the OpenID Connect (OIDC) protocol. This feature is available for all users wishing to log in to Shoreline Design through their identity provider (IdP).

There are many OIDC providers. This page details how to configure SSO using Microsoft Entra ID.

Configure SSO in Shoreline Design

1. Go to Team Settings.
2. Click the SSO tab.
3. Populate the fields.
   • Your inputs here will depend on your IdP. We provide instructions to configure Microsoft Entra ID.
4. Click save. You will see the screen below.
5. Copy the Redirect url and Scopes values and input them into your IdP provider's platform.
   • In Microsoft Entra ID:
     • For the Redirect url go to Authentication, click on Add a platform, and select Web.
     • For Scopes, go to API permissions and click Add a permission.

You can now log in to Shoreline using SSO.

Configure Microsoft Entra ID

1. Register a new app in Microsoft Entra ID with the required parameters.
   • Note: Do not add a redirect URI. You will add this value later.
2. Click Certificates & secrets in the left-hand menu.
3. Add a client secret and copy and store the value.
4. Click Overview in the left-hand menu.
5. Copy and store the Application (client) ID value.
6. Click the Endpoints tab.
7. Copy the OpenID Connect metadata document URL.
8. Open the URL in your browser and copy and store the following values:
   • issuer
   • authorization_endpoint
   • token_endpoint
   • jwks_uri
9. Configure SSO in Shoreline Design using the values you have copied and stored.