Single Sign On allows organizations to let employees use a single set of credentials to log in to multiple software applications. Below are the steps on how an Admin user can set up Click Maint login via SSO with Microsoft Entra ID.
Steps
Entra ID Set Up
Step 1: Add the Redirect URI
In the Entra portal, open your app registration for Click Maint. If you don't have one yet, register a new application here.
Go to Authentication.
Click Add a Redirect URI.
Enter the following URL exactly:
Non-Canadian customers:
https://app.clickmaint.com/sso/oidc/callbackCanadian customers:
https://app.clickmaint.ca/sso/oidc/callback
Click Save.
Step 2: Add Email as an Optional Claim
Go to Token configuration.
Click + Add optional claim.
Select Access as the token type.
Check email from the list and click Add.
Step 3: Configure API Permissions
Go to Configure Permission > API permissions.
Confirm that email and offline_access are listed. If either is missing, click + Add a permission to add it.
Click Grant admin consent for [your organization name] and confirm when prompted. The Status column should show the permissions as granted.
Step 4: Copy Your Credentials
Please make sure you copy the following details to be used in Click Maint:
OIDC Endpoint — Use the format:
https://login.microsoftonline.com/{your-tenant-id}/v2.0. Replace{your-tenant-id}with your Directory (tenant) ID, found under Overview in your app registration. Do not use the longer discovery URL ending in/.well-known/openid-configuration.Client ID — Found under Overview as "Application (client) ID".
Client Secret — Found under Certificates & secrets. If you don't have one, click + New client secret, then copy the value immediately as it won't be shown again.
Set Up Entra ID in Click Maint
Log in to Click Maint and select Admin Settings module from the main menu.
Select the SSO tab.
Click on the Configure link for Entra ID to open the window.
Enter the OIDC Endpoint, Client ID, and Client Secret that you saved from the Entra ID setup.
Click the Save button.
Add New SSO Users
From the Admin Settings module and All Users tab, click on +User button to open the Add User form.
Enter the email address of the new SSO user.
From the Authentication type field, select SSO.
Enter the first name, last name, and role for each entity from the dropdown. All other details are optional.
Click the Add User button.
Note: Invitation emails aren't sent to users set up via SSO. |
How to Migrate Existing Users to SSO
Connect with the Click Maint Support team for help. You can do so via the portal or email [email protected]. We'll help you in setting up for existing users that need to move to SSO.
Removing an SSO User
Important to note, before you remove a user from your group (outside Click Maint), you must log in to Click Maint and mark them as Inactive. |
Log in and select Admin Settings from the main menu.
Select the All Users tab.
Click on the user's name to open the User's profile card.
Click on the three dots icon in the top right.
Select Inactive.
In the Make User Inactive Window, hit the Make Inactive button to confirm.
Here's the SSO log in guide to share with all users once configured.