a pre-requisite in this step is to know the URL where you are hosting the application.

go to integrations and then to the SSO subpage

if new SSO integration form looks like this

numbers corresponding to the numbers in red circles in the form picture above:

1. Name of this configuration
2. Client ID: this comes in the requests to the application.
3. Client secret: this one also
4. Expiry date of this configuration
5. Discovery URL: This will be the URL where the application is hosted+”/.well-known/open-configuration”. This is a part of OIDC standard.
6. this is the field which corresponds to the email field in the claim for SSO
7. the is the field which corresponds to the key in the payload for roles
8. we have 2 roles in DeepAlpha, Admin and Advisor, we map thes roles to the values in the roles array
9. same as above for 8.
10. Enable/disable this SSO configuration