# Identity Provider Configuration

To set up Single Sign-On (SSO) in EI Tunnel Manager, log in to EI Tunnel Manager using the admin credentials. The Identity Provider Configuration page of the Single Sign-On app allows you to enter the details of your configuration to setup the login with the existing environment.

After filling in the mandatory fields, click Save to proceed.

Input Field | Description
Authority | Your Identity Provider (IdP) Authority URL. This is the endpoint where EI Tunnel Manager redirects users to perform the login step with the IdP.
Client ID | Your EI Tunnel Manager fully qualified domain name and any variations.
Client Secret | You need to configure a client secret on your IdP and enter the EI Tunnel Manager domain entries as redirect URLs. Redirect URLs take the following form: https://%3cEIhttps://<EI address>/identity-provider/api/v1/oidc-external/callback
Role Claim Type | This field indicates the roles or groups of the user. If you do not use Role Based Access Control in your IdP, this might not be required.
User Name Claim Type | This field indicates the username of the individual.