This article provides a guide on enabling Single Sign-On (SSO) for the Business Dashboard. To do this, you will need help from your internal IT department. Here, you will find detailed instructions and information on the following topics:
Configuring SSO with Google
The setup process involves the following steps:
Create a new OAuth2.0 API Credential in Google.
Set the origin as: https://accounts.airthings.com/
Set the redirect URI as: https://accounts.airthings.com/federated
Copy the client ID and secret for use in the Airthings Dashboard settings.
Log in to the Airthings Dashboard and ensure that you have selected the correct organization.
Navigate to: Account - Organization - SSO
Enable SSO and fill in the fields below
Select Google as the provider.
Enter the email domain for which you want to activate SSO.
Enter the client ID and secret copied from the Google API Credentials setup.
Save the form and copy the TXT record.
Add the TXT record to your DNS provider for the email domain.
Once the TXT record is in place, you can verify domain ownership from within the SSO setup form.
After successful verification, you can activate SSO for your domain by clicking "Activate" in the form.
Proceed by inviting the users (by email) to your organization on the Airthings Dashboard.
Configuring SSO with Azure
Create a new App registration (refer to the screenshot below).
Set the redirect URI as: https://accounts.airthings.com/federated
Create a client secret, the client ID and secret will be used in the Airthings Dashboard settings.
Make sure the client is allowed to read User Info, in API Permissions.
Log in to the Airthings Dashboard and ensure that you have selected the correct organization.
Navigate to: Account - Organization - SSO
Enable SSO and fill in the fields below
Select Microsoft as the provider.
Enter your Microsoft Tenant id.
Enter the email domain for which you want to activate SSO.
Enter the client Id and secret copied from the Azure App Registration setup.
Save the form and copy the TXT record.
Add the TXT record to your DNS provider for the email domain.
Once the TXT record is in place, you can verify domain ownership from within the SSO setup form.
After successful verification, you can activate SSO for your domain by clicking "Activate" in the form.
After activation users configured with email addresses matching the verified email domain will be able to sign in to Airthings using SSO.
Proceed by inviting the users (by email) to your organization on the Airthings Dashboard.
How to validate the domain name
If your organization is looking to use Single Sign-On (SSO) to access the Airthings dashboard, you'll need to complete domain validation to confirm that you're the rightful owner of the domain names you wish to use for SSO. This involves adding a TXT record to the domain registered in the Airthings dashboard. In this guide, we'll walk you through the steps to add the TXT record and complete domain validation. If you want to use multiple domain names, these steps need to be completed for each domain name individually.
Login to your domain registrar or DNS provider account. This is where you can manage your domain settings.
Go to the DNS management section. Look for a section labeled "DNS" or "DNS management." Keep in mind that the exact location of this section may vary depending on your domain registrar or DNS provider.
Select the domain you wish to validate. If you have multiple domains, ensure that you choose the correct domain for which you want to add the TXT record. This should match the domain you entered in the “email domain” field in the SSO setup.
Add a new TXT record. Look for an option to add a new record, usually labeled "Add Record" or "Add DNS Record." From the dropdown menu, select "TXT" as the record type.
Enter the required information. You will need to input the "Name" or "Host" field and the "Value" field. The "Name" field should be the domain name you want to validate, and the "Value" field should be the specific TXT record value that you received from the Airthings dashboard.
Save your changes. Once you have entered the required information, click the "Save" button. Please keep in mind that it might take a few minutes to a few hours for the new TXT record to propagate throughout the DNS system.
Verify domain validation in the Airthings dashboard. After performing the above steps, you can verify that the domain validation has been completed by checking the Airthings dashboard. In the domain verification section, click on the Verify button next to the domain you added the TXT record for.
If the verification is successful, the domain will be marked as verified. If the verification fails, you can use an online tool, such as "DNS Checker" or "MX Toolbox," to check the TXT record for your domain as a troubleshooting step.