How to enable Single Sign-On between Ewon Cloud and your Identity Provider (IDP)

Follow the steps below to enable SSO for your Ewon Cloud environment:

1. Open a Support Ticket

   Submit a support request through our support portal. The request must be created by a user with Super Administrator privileges in the Ewon Cloud space.

2. Provide the Required Information

   Include the following details in your support ticket: 

   • Ewon Cloud Space name
   • Application (Client) ID
   • Client Secret
   • Organization domain name (for example: mycompany.com)

   In Microsoft Entra ID, these details can be obtained by registering a new application under App Registrations.
   
   

   Once the application is created, gather the required information and include it in your request.
   
   
   
   

   Security Recommendation: We strongly recommend sharing the Client Secret through a secure, temporary secret-sharing service such as Password Pusher (for EU https://eu.pwpush.com/, for US https://us.pwpush.com/).

3. Identity Provider Registration

   After all required information has been received, our support team will request the DevOps team to register your Identity Provider in Ewon Cloud.

4. Configure the Redirect URI

   Once your Identity Provider and domain have been successfully registered, we will provide you with the Redirect URI. You must then configure this Redirect URI in your Microsoft Entra ID application settings.
   
   
    

5. Test the SSO Configuration

   After the configuration is complete, SSO will be operational.

   To verify the setup:

   • Navigate to https://www.ewoncloud.com
   • Sign in using the email address of a user managed by your Identity Provider
     
     

   Note: Users do not need to be pre-created in Ewon Cloud. When a user signs in through SSO for the first time, they will be guided through the user account creation process before gaining access.