---
title: "SSO Connection Screen"
slug: "single-sign-on-sso-connection-screen"
description: "Configure identity provider settings — metadata URL, entity ID, certificate — on the SSO Connection screen to enable Single Sign-On in R365."
updated: 2025-12-27T00:04:45Z
published: 2026-01-12T08:00:08Z
canonical: "docs.restaurant365.com/single-sign-on-sso-connection-screen"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.restaurant365.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO Connection Screen

The SSO Connection screen contains the integration settings for a third party SSO provider. This screen has a consistent layout across supported providers, including [Okta](/doc/docs/okta-sso-integration) and [Microsoft Entra (Azure)](/doc/docs/microsoft-entra-azure-configuration-page), with provider-specific fields where applicable.

From this screen, users can:

- View and configure the SSO provider connection
  - [Connect to Okta](/doc/docs/okta-sso-integration)
  - [Connect to Microsoft Entra (Azure)](/doc/docs/microsoft-entra)
- [Disconnect the SSO provider](/doc/docs/disconnect-sso-connection)

---

## Security

**SSO permissions are found in the permission tree as follows:**

- Administration
  - Single Sign-On (SSO)
    - View Single Sign-On
    - Create/Edit Single Sign-On
    - Delete Single Sign-On

These permissions can be added to [custom user roles](https://restaurant365.us.document360.io/doc/docs/custom-user-roles) or [individual users](https://restaurant365.us.document360.io/doc/docs/users-overview-and-security). The [Permission Access report](https://restaurant365.us.document360.io/doc/docs/generating-a-permissions-access-report) can be used to determine which user roles or users already have these permissions assigned. For more information, see [User Setup and Security](/doc/docs/user-setup-security-and-location-access).

---

## Navigation

**Navigate to the [**Single Sign-On page**](/doc/docs/single-sign-on-page), then click **Connect** or **Edit** for the desired SSO provider.**

1. Click **Admin** in the left navigation rail.
2. Expand the **Users & Security** category.
3. Click **Single Sign-On (SSO)**.
4. In the row for the desired SSO provider, select **Connect** or **Edit**, depending on the current connection status.

![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-9O2E5MI2.png?sv=2026-02-06&spr=https&st=2026-10-29T21%3A40%3A26Z&se=2026-10-29T22%3A40%3A26Z&sr=c&sp=r&sig=Cd0rCQ4ZXUzC18sBNBnc9MpzIxZLFbbSQkqPvkwwn1I%3D)

---

## Single Sign-On Configuration Screen Buttons and Fields

![](https://cdn.us.document360.io/5c9d1111-0c69-4e96-8910-d7f2750fdc9d/Images/Documentation/image-7R3LFRYR.png?sv=2026-02-06&spr=https&st=2026-10-29T21%3A40%3A26Z&se=2026-10-29T22%3A40%3A26Z&sr=c&sp=r&sig=Cd0rCQ4ZXUzC18sBNBnc9MpzIxZLFbbSQkqPvkwwn1I%3D)

|  | Button/Field | Description |
| --- | --- | --- |
| **1** | SSO Provider | SSO provider for the displayed connection configurations. |
| **2** | Connection Status | Status of the connection: - **Connected** - Indicates the SSO provider is active and connected. - **Not Connected** -Indicates the SSO provider is configured but not connected. Learn more about connecting [Okta](/doc/docs/okta-sso-integration) or [Microsoft Azure](/doc/docs/microsoft-entra). > This status is only displayed when the SSO provider has been configured. |
| **3** | Menu | Includes the following options: - [Remove connection](/doc/docs/disconnect-sso-connection) > This button is only displayed when the SSO provider has been configured. |
| **4** | Connection Fields | SSO provider-specific connection fields. See details for [Okta](/doc/docs/single-sign-on-sso-connection-screen#okta-configuration-fields) and [Microsoft Entra (Azure)](/doc/docs/single-sign-on-sso-connection-screen#microsoft-entra-azure-fields) below. |
| **5** | Connect | Saves the current configuration and attempts to establish a connection with the third-party SSO provider. |
| **6** | Cancel | Closes the SSO page without saving changes made. |

### Okta Configuration Fields

| Field | Description |
| --- | --- |
| Client ID | Public identifier required by all OAuth flows, created when the app integration is set up. > The **Client ID** is provided by Okta as part of the client credentials. |
| Client Secret | A unique secret generated by Okta for secure communication between Okta and R365. > The **Client Secret** is provided by Okta as part of the client credentials. |
| Authority | The Okta domain used to authenticate users and manage secure access to applications. |
| Sign-in redirect URI | The Sign-in Redirect URI where Okta sends the authentication response and ID token after a sign-in. |

### Microsoft Entra (Azure) Fields

| Field | Description |
| --- | --- |
| Client ID | Public identifier required by all OAuth flows, created when the app registration is set up. > [!NOTE] > The **Client ID** is provided by Microsoft Entra (Azure) as part of the client credentials. |
| Client Secret | A unique secret generated by Microsoft Entra (Azure) for secure communication between Microsoft Entra and R365. > [!NOTE] > The **Client Secret** is provided by Microsoft Entra (Azure) as part of the client credentials. |
| Directory ID | Unique identifier assigned to each Azure AD tenant. > [!NOTE] > The **Directory ID** is provided by Microsoft Entra (Azure) as part of the client properties. |
| Sign-in redirect URI | The Sign-in Redirect URI where Microsoft Entra (Azure) sends the authentication response and ID token after a sign-in. |