Skip to main content

SSO Setup & Usage (Google & Microsoft Entra)

Wemply supports Single Sign-On (SSO) via the OpenID Connect (OIDC) protocol.

On the Wemply side, you need to go to Configure → Settings → SSO Settings and enter:

  • Authority URL

  • Client ID

  • Client Secret

Below are instructions on how to generate these for Google & Microsoft Entra:


A) SSO Setup for Google Workspace Users

1. Create a project (or use an existing one) in Google Cloud Console

  1. Click at the top Select project → New project

  2. Name the project (e.g. Wemply SSO)

  3. Click Create


2. Enable the required API

  1. Go to APIs & Services → Library

  2. Search for: Google Identity Services

  3. Make sure OAuth 2.0 services are enabled


3. Configure the OAuth Consent Screen

  1. Go to APIs & Services → OAuth consent screen

  2. Select:

    • Internal

  3. Fill in:

    • App name: Wemply

    • User support email

    • Developer contact email

  4. Save


4. Create OAuth Client ID

  1. Go to APIs & Services → Credentials

  2. Click Create Credentials → OAuth Client ID

  3. Application type: Web application

  4. Add:

Authorized redirect URI:

https://[your-wemply-domain].wemply.com/auth.html
  1. Click Create

Google will display:

  • Client ID

  • Client Secret


5. Enter into Wemply

In the Wemply SSO settings, enter:

Authority URL:

https://accounts.google.com

Client ID: (from Google)
Client Secret: (from Google)


B) SSO Setup for Microsoft Entra ID (formerly Azure AD)

1. Open the Microsoft Entra Admin Center

Go to: https://entra.microsoft.com
Log in as an administrator.


2. Register a new application

  1. Go to Applications → App registrations

  2. Click New registration

  3. Name: Wemply SSO

  4. Supported account types (⚠️ always select this option):

    • Single tenant / Accounts in this organizational directory only

  5. Redirect URI:

    • Type: Web

    • URI:

https://[your-wemply-domain].wemply.com/auth.html
  1. Click Register


3. Find the required details

After registration, you will see:

  • Application (client) ID → this is your Client ID

  • Directory (tenant) ID → needed for the Authority URL


4. Create a Client Secret

  1. Go to Certificates & secrets

  2. Click New client secret

  3. Add a description

  4. Click Create

⚠️ Copy the secret immediately — you won't be able to view it again later.


5. Authority URL for Microsoft

Authority URL format:

https://login.microsoftonline.com/{tenant-id}/v2.0

For example:

https://login.microsoftonline.com/12345678-xxxx-xxxx-xxxx-xxxxxxxxxxxx/v2.0

6.Enter into Wemply

In the Wemply SSO settings, enter:

  • Authority URL (including the tenant ID)

  • Client ID

  • Client Secret


Testing

After setup:

  1. Save the settings in Wemply

  2. Log out

  3. Select "Sign in (SSO)"

  4. Verify that:

    • the user's email matches the organization's domain

    • sign-in redirects to the correct tenant and you're successfully logged in

Did this answer your question?