# SSO configuration

Use this page to configure Azure SSO for Bridge XR.

### Goal

Create an application registration in Microsoft Entra ID that can be used by:

* the web dashboard
* the web player
* the Unity-side login flow where required

### Step 1: open Microsoft Entra ID

Log in to Azure Portal and open **Microsoft Entra ID**.

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2FpDFPMuXCiQ1zF4RPNjSa%2Funknown.png?alt=media&#x26;token=1ca99bfb-b96e-46e9-b1f6-5b611c45833f" alt="Open Microsoft Entra ID"><figcaption><p>Open Microsoft Entra ID</p></figcaption></figure>

### Step 2: register a new application

1. Open **App registrations**.
2. Create a new application.
3. Give it a clear name.
4. Click **Register**.

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2FYYMyBsMxdXamn5ABAzQX%2Funknown.png?alt=media&#x26;token=0053a5a4-24c1-4a3b-9221-68d3517f4aaa" alt="Azure app registrations"><figcaption><p>Azure app registrations</p></figcaption></figure>

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2FJ3e6pLQGlLJ6VzbYGLic%2Funknown.png?alt=media&#x26;token=4ea71b66-64b8-42d1-9ff7-17a8d6f9d28d" alt="Create a new Azure application"><figcaption><p>Create a new Azure application</p></figcaption></figure>

### Step 3: add redirect URIs

Add the required redirect URIs for Bridge XR.

#### Mobile and Desktop applications

Add:

`unityhub://editor/cdm.authentication.editoraddons.editorlink/`

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2FvIvXJfOlMLFzxrKwfaId%2Funknown.png?alt=media&#x26;token=ea265b11-8285-4075-83e7-4c23c30a0009" alt="Select Mobile and Desktop applications"><figcaption><p>Select Mobile and Desktop applications</p></figcaption></figure>

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2Fj7Hatag8n5JDTz52Nrqj%2Funknown.png?alt=media&#x26;token=4352c89f-fb5a-41e5-85fc-8b5b831ec5fe" alt="Configure the Mobile and Desktop redirect URI"><figcaption><p>Configure the Mobile and Desktop redirect URI</p></figcaption></figure>

#### Single-page application for the deployed dashboard

Add:

`https://<YOUR_BASE_URL>/msal-login-popup`

Use your final Bridge XR dashboard base URL.

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2Fb3gsVIUFyA2S3jPR5Jgp%2Funknown.png?alt=media&#x26;token=c594654c-ef28-4361-9aef-fff919f3aa25" alt="Add a single-page application redirect URI"><figcaption><p>Add a single-page application redirect URI</p></figcaption></figure>

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2F6mMtCdO0UwhIMfmSuhHG%2Funknown.png?alt=media&#x26;token=55e81be1-9933-4be0-a476-220c8b8beec8" alt="Configure the dashboard redirect URI"><figcaption><p>Configure the dashboard redirect URI</p></figcaption></figure>

#### Local callback

Add:

`http://localhost:51273/StreamingAssets/callback.html`

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2Fyp4rxU885UlpjNRQ7Ut9%2Funknown.png?alt=media&#x26;token=f0b51efe-193d-4ea7-83d6-11c591322868" alt="Add the local callback redirect URI"><figcaption><p>Add the local callback redirect URI</p></figcaption></figure>

Once configured, the application should include all required redirect URIs.

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2FrLKWRHDMXBYXf0rkvYEQ%2Funknown.png?alt=media&#x26;token=4f583873-8c72-4540-b68e-1a18e8d57f4a" alt="Completed Azure redirect URI setup"><figcaption><p>Completed Azure redirect URI setup</p></figcaption></figure>

### Step 4: configure token claims

1. Open **Token configuration**.
2. Add the required **Optional Claim**.

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2FDN4Hsdg7RgbJg9Ml5Mqe%2Funknown.png?alt=media&#x26;token=2ec09b20-b805-45ac-a725-9d37e2feda17" alt="Open Token configuration"><figcaption><p>Open Token configuration</p></figcaption></figure>

<figure><img src="https://2377590261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fz0pDcUm114qZSWNhbhEt%2Fuploads%2FBTIKyJz7g208jwxMUQcr%2Funknown.png?alt=media&#x26;token=f9cb4c3b-a914-4de9-9f4d-2786940626d3" alt="Add the required Optional Claim"><figcaption><p>Add the required Optional Claim</p></figcaption></figure>

### Next step

After Azure is configured, continue with [SSO Integration](https://unity.zoeimmersive.com/bridge-xr/set-up-bridge-xr/server-deployment/sso-integration).
