You can allow SSO users to log in to Command WorkStation and WebTools

1. In Configure > Network > Single Sign-On (SSO), select Enable SSO. Microsoft Entra ID may be referred to as "Azure Active Directory (Azure AD)" in Configure.
2. Copy this information from the Microsoft Entra account and paste it in the Single Sign-On window
   • OpenID Connect metadata document
   • Directory (Tenant) ID
   • Application (Client) ID

   The Directory (Tenant) ID and Application (Client) ID are available in the Overview section of the registered app. The OpenID Connect metadata document URL is visible when you click Endpoints in the same section.

3. Copy the Redirect URL and add it in the Authentication section of the registered app in Entra.

   The Redirect URL is pre-generated and contains the name of the Fiery server. If the host name changes, you must restart the Fiery server and add the new Redirect URL in Authentication section of the registered app in Entra.

   The Fiery server cannot have the same hostname as another Fiery server in the same intranet.

4. Click Save.
5. To validate the details, click Validate. The pop-up blocker in your web browser must be turned off.
6. Click Advanced in the warning page and click Accept the Risk and Continue.

   Depending on your web browser, the option names may be different.

   If the details are correct, the validation will be completed in 180 seconds. If the validation times out, restart the procedure for authentication.