# SSO Single Sign-On Integration

## About

Registering an application to login with WiKey has great benefits. The users don't need to hide or remember any password and don't need to provide any personal information. This creates a substantial security advantage.&#x20;

Note:  This is a one-time setup that should be done by your IT admin&#x20;

## Overview

To setup an application to work with WiKey there are two steps that need to be done:&#x20;

1\) In the WiKey Identity Provider Portal: Set up a SAML certificate and associate it with a certain target app (the Target app can be Microsoft 365).

2\)  Configure the target app so logins will be done via the WiKey, Each target app has a different configuration  &#x20;

<figure><img src="https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FackJs8Nz0fU6NzczYxRG%2FSAML%20target%20app.png?alt=media&#x26;token=5cdf594d-97be-4800-9af5-09e230f5b16c" alt=""><figcaption></figcaption></figure>

## WiKey Identity Provider Dashboard Configuration

### Login to Dashboard <a href="#u0s199g6lnoc" id="u0s199g6lnoc"></a>

Log in to the WiKey Identity Provider dashboard: [https://auth.omnistar.io/login/XYZ](https://auth.omnistar.io/login/XYZ),\
where XYZ is the name given to you by the WiKey organization registration system\


**Note:**\
1\) For the initial login you should use the email you registered your organization with and the password that was given to you during the account registration

2\) For all subsequent registrations, use the WiKey authenticator to login to the portal. You can download the WiKey Authenticator via this link: [https://open.wikey.io](https://open.wikey.io)



<figure><img src="https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FlfuNCvOn6mAoJOWf6gE1%2FScreenshot%202024-09-29%20121022.png?alt=media&#x26;token=809aa02c-148d-487e-8b75-ffd27447701b" alt="" width="188"><figcaption></figcaption></figure>

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FN3J6tkoJYKWqaQxR6NvU%2F0.png?alt=media)

### Add Certificate <a href="#judjg0eisq20" id="judjg0eisq20"></a>

Although not mandatory, we advise adding a certificate per target application.  This means that if, for example, you use Microsoft 365 for your email and you also use a CRM, you would need to repeat these steps two times.&#x20;



On the Top Menu Click: \[Identity -> certs]

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FbLrAngf68heNjRWPilYC%2FScreenshot%202024-09-29%20121315.png?alt=media\&token=be593dd3-364a-446d-a7da-f7cf9c893758)

<figure><img src="https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2F4aiyha2QGyi5phj5Rt1Z%2FScreenshot%202024-09-29%20121858.png?alt=media&#x26;token=1bac5602-e57c-47fb-836d-d5d676f9f5a3" alt=""><figcaption></figcaption></figure>

In the identity -> Certs page, Click on Add

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2Fg2EfMrhm7LMBBMXX8S6Z%2FScreenshot%202024-09-29%20122030.png?alt=media\&token=e7282004-2791-4903-843a-76974a028030)

Then confirgure the newly created certificate: (1) Fill in the fields, (2) Download the certificate to your computer, (3) Save & Exit

Note:

1. Remember the Display name of the certificate you created.
2. A new certificate is advised per application

### Add Application <a href="#id-7u0qntgstnxu" id="id-7u0qntgstnxu"></a>

Add an application that will work with the above-created certificate.&#x20;

On the Top Menu Click: \[Identity -> Applications]

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FJXbnXaNjABT1vtlhdMeI%2FScreenshot%202024-09-29%20122144.png?alt=media\&token=8550ad90-fe6f-41ab-9faa-f8c8d8ba7ae2)

Then, on the page:

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2F7dVvajQa82gVbzijg6ff%2FScreenshot%202024-09-29%20122330.png?alt=media\&token=917bfe2d-0d70-4b81-9b53-fffb8eb99f15)

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FDcfj64cFeGNAfViSnoUL%2FScreenshot%202024-09-29%20122512.png?alt=media\&token=492504d7-7c4d-45b8-a54f-5950ce37ba84)

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2F7TFmpdw2K2NJwr3FyqQI%2FScreenshot%202024-09-29%20122628.png?alt=media\&token=3d98be53-e9f8-4a37-aab8-d545500b63c1)

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FU2RWOB7m1jYPDY1sUKeV%2FScreenshot%202024-09-29%20122737.png?alt=media\&token=6c514aba-9ace-4a9c-9f97-446da2dd9918)

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FSO9JXCzUIvOrdsp58ukC%2FScreenshot%202024-09-29%20122825.png?alt=media\&token=918aa6b5-5279-41d2-9e90-9c3485fefdf9)

Click on the copy SAML metadata URL and paste the link into a new tab in the browser.&#x20;

In the new tab, save the metadata to a file on your computer



<figure><img src="https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2FiudMmuTmmivJha0khVyS%2FScreenshot%202024-09-29%20141054.png?alt=media&#x26;token=50c0be59-f8bd-4b88-a0ed-5240e0d30a2d" alt=""><figcaption></figcaption></figure>

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2F16iBJ8p7oMYuN7GwyZzd%2FScreenshot%202024-09-29%20122859.png?alt=media\&token=54d45321-230d-4bdf-a47a-4ad58390f0f1)

Click to copy the sign-in page URL



Scroll up and click on the “save & exit” Button

![](https://1294881524-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWaNNVDVwCmHsGwUaODcF%2Fuploads%2F7rKOY79eZGCmZjm27pWq%2FScreenshot%202024-09-29%20122940.png?alt=media\&token=c920a80f-6897-476f-8900-5e77601f88f8)

## Configure target application <a href="#a9cizb3oy39" id="a9cizb3oy39"></a>

Configure the target application with the certificate you downloaded earlier and with the sign-in URL (from step 5)



