Enhance your enterprise security and user experience with our Single Sign-On (SSO) Client Capability via OAuth. Our solution enables seamless, secure access to your software by integrating with your existing identity providers. With OAuth-based SSO, users can authenticate once and gain instant access to all connected systems—eliminating password fatigue and reducing IT overhead.

Compatible Enterprise SSO Providers

Our software supports integration with major enterprise SSO providers, including:

Microsoft Entra ID (formerly Azure AD)
Okta
Google Workspace (Google Identity)
Auth0
Ping Identity
OneLogin
Keycloak

How to Set Up

Information that is needed by us

You need to get the following information from the OAuth Provider:

Client ID
Client Secret (Please don’t share via mail)
Authorization Endpoint (URL)
Token Endpoint (URL)
Userinfo Endpoint (URL, not necessary for OIDC/ADFS)
Mapping between claim names (see below)

Information that is needed by you

The following URL needs to be whitelisted in the OAuth Provider:

https://[domain of 3YOURMIND platform]/auth/oauth/callback/

Mapping between claim names

In order to map user information from the OAuth provider to the 3YOURMIND System the following Attribute Mappings are possible. For each of the items in the following table, you can either:

Do not provide a mapping. The software will try to fetch the information from the OAuth provider using the “3YOURMIND Key Name”. If email can not be found, the connection fails.
Provide a mapping. E.g. first_name may be mapped to GivenName
Provide a default value (e.g. city can be “Berlin” for all customers)

3YOURMIND Key Name	Required	Belongs to	Explenation

3YOURMIND Key Name	Required	Belongs to	Explenation
email	yes	User
customer_number	no	User
first_name	no	User + Address
last_name	no	User + Address
line1	yes, if address should be created. If this field is missing, no Address will be created	Address
zip_code	yes, if address should be created. If this field is missing, no Address will be created	Address
city	yes, if address should be created. If this field is missing, no Address will be created	Address
country_id	no (if not present, default country will be used)	Address
company_name	no	Address (customisable field)
vat_id	no	Address (customisable field)
department	no	Address (customisable field)
title	no	Address
line2	no	Address
state	no	Address
phone_number	no	Address
user_panel_access_group	no	UserAccessGroups	Can be one of `viewer`, `buyer`. If not provided, the default will be used - refer to Creating and Configuring your Organization \| User Roles

SetUp

The setup will be carried out by our Technical Support Team. Please get in touch with us to coordinate it.

Platform Documentation