Skip to main content

Identity Providers

Configuration for Administrators

Accessing Settings

  1. Go to: Settings > General > Authentication.
  2. You can view currently registered identity providers.
  3. Click "New Provider" to add a new one.
Available Providers

Currently, the system supports the following providers:

  • Microsoft - For integration with Azure AD/Entra ID.
  • Google - For integration with Google Workspace or personal accounts.

Configuring a Provider

To create a provider, click the New Provider button.

Registration Properties

  1. Domain: Base address of the provider's authentication service.
  1. Redirect URI: The URL where the user will be sent after authenticating with the provider. RemotaSafe provides a predefined redirect address.
  2. Copy redirect address button.
  3. Client Secret: A secret key that authenticates your application with the provider. This is sensitive information and must be kept secure.
  4. Client ID: The public identifier for your application at the provider (a GUID for Microsoft or a string ending in .apps.googleusercontent.com for Google).
  5. Directory ID (Tenant ID): The identifier for your organization (a GUID or domain name for Microsoft; leave blank for Google).
  6. Access Type: Controls who can use this provider (None: any account; Domain: only specific domains; Default: recommended setting).
  7. Provider Type: Defines which authentication service will be used (Microsoft for Azure AD/Entra ID or Google for Google accounts).

Image: Registering a new identity provider.

Getting Credentials

Getting Credentials

To obtain Microsoft credentials (Client ID, Client Secret, and Tenant ID):

📖 Official Tutorial: Register an application with Microsoft Entra ID

Information you will need to collect:

  • Application (client) ID - Found on the "Overview" page.
  • Directory (tenant) ID - Found on the "Overview" page.
  • Client Secret - Created under "Certificates & secrets".
Important - Microsoft
  • The redirect URI comes predefined in the provider settings.

Image: Redirection address in the provider settings.

  • The client secret is only shown once upon creation.
  • Copy and store all information in a safe place.
  • Ensure you have administrative permissions in Microsoft Entra.

Once configured, the provider will be available for use by both administrators and users.


For Users

Prerequisites

To use an identity provider:

  • The provider must be configured and enabled by the administrator.
  • You must have a valid account with the provider (Microsoft or Google).
  • Your account must meet any defined access criteria.

Accessing Settings:

  1. Log in to the system as usual.
  2. Go to Profile > Preferences.
  3. Click the "Access" tab.
  4. Locate the available identity providers.

Linking an Account:

  1. Click "Link" for the desired provider (Microsoft or Google).
  2. A new window/tab from the provider will open.
  3. Log in with your provider credentials.
  4. Authorize access when prompted.
  5. The window will close automatically, and the account will be linked.

Image: Linking an account in the user preferences.

Linking Status
  • After linking, the "Link" button will change to "Unlink", allowing you to disconnect the account if necessary.
  • Log in to RemotaSafe again to verify the link is working.

Logging In with a Provider

Once your account is linked, you can use the provider buttons on the login page.

At the Login Screen:

  1. Click the button for your desired provider.
  2. You will be automatically redirected to the provider's login page.
  3. Select your account and enter credentials if prompted.
  4. Login successful!