Skip to main content
Version: 1.3.0

Single Sign On

VirtualMetric DataStream single sign-on integration allows users with existing Azure AD/Entra ID accounts to access DataStream without creating separate credentials. Users authenticate through their organization's Azure AD system and gain access to DataStream based on their assigned roles and permissions.

Configure Azure AD/Entra ID authentication to enable single sign-on access to VirtualMetric DataStream cloud platform.

Enable SSO for Tenant​

  1. Navigate to Organization Settings

    • Access the Organization menu from the cloud interface
    • Select Tenant Settings

  2. Configure Authentication Type

    • Locate the Authentication section
    • Set Auth Type to OAuth
    • Enable the SSO Enabled toggle

  3. Azure AD Configuration

    • OAuth Config: Enter your Azure AD application configuration
      • client_id: Azure AD application client ID
      • client_secret: Azure AD application client secret
      • tenant_id: Azure AD tenant identifier
      • redirect_uri: VirtualMetric callback URL
    • OAuth Scope: Specify required permissions (e.g., openid profile email)

Azure AD Application Setup​

Prerequisites: Azure AD administrator access required.

  1. Register Application

    • Navigate to Azure Portal → Azure Active Directory → App registrations
    • Create new registration with appropriate redirect URI
    • Note the Application (client) ID and Directory (tenant) ID

  2. Configure Authentication

    • Add platform configuration for web application
    • Set redirect URI to your VirtualMetric tenant URL
    • Enable ID tokens and access tokens

  3. Create Client Secret

    • Navigate to Certificates & secrets
    • Create new client secret
    • Copy the secret value immediately

User Access Management​

When SSO is enabled, users with Azure AD accounts can access DataStream directly without requiring separate VirtualMetric user accounts. Azure AD handles both authentication and provides user identity information to DataStream for access control.

When SSO is disabled, users must have dedicated VirtualMetric DataStream user accounts with username/password authentication to access the system.

Disable SSO​

  1. Navigate to Tenant Settings
  2. Disable the SSO Enabled toggle
  3. Users will revert to VirtualMetric username/password authentication