# Set up an SSO destination

This article is specific to SSO destinations, or <u>SSO configs</u> as they’re referred to in the Redox dashboard. A health tech vendor needs an SSO destination to launch an app from an EHR system. [Learn more about handling app launch (SSO)](/basics/handling-app-launch-sso-from-ehr-systems).

## Prerequisites

- A user must be assigned to an <u>**engineer role**</u> to manage destinations. [Learn about user roles](/basics/managing-access-for-your-redox-organization/what-are-user-roles).
- Decide on and configure your supported authentication standard (e.g., SMART on FHIR, SAML Web Browser Profile) to handle app launch. 

## Create an SSO destination

1. Log in to the Redox dashboard.
2. From the navigation menu, click the **Developer** page.
3. By default, the <u>Sources</u> tab opens. Click the **Destinations** tab. 
4. Any configured destinations display. Click the **New** button \> **New SSO config** option to create an SSO destination.
5. A new modal opens with a field for the name. Enter the name and click the **Add** button. 


![A user enters the name of a new SSO config, or destination, and the Add button is highlighted to complete setup.](https://images.ctfassets.net/cl3wt5ehhnlv/ZFbNmAA8dzpUl57FjdKDl/5f9fea49cb86d4b09ee84edb86fc9823/Developer_SSO-destination-create.png)

*Add a new SSO destination*


6. The <u>Settings</u> page for the new destination opens. The <u>Name</u> field displays the name you entered previously. 
7. Click the **Edit** button to enter the SSO settings:
   1. <u>SSO URL</u>: Enter the **URL** that will receive POST requests. The URL should use SSL/TLS encryption, which means it needs to start with `https://`.
   2. <u>SSO error URL</u>: Enter the **URL** where the requestor should be redirected in the event of an error message. We recommend a static error page separate from the SSO service. 


![A user clicks the Edit button to make the SSO URL and SSO error URL fields editable. ](https://images.ctfassets.net/cl3wt5ehhnlv/4GHHydHXAHz26k6zeOfZBE/b33c683aab918dc9421c6a5d8adb2893/sso-destination-enter-urls.gif)

*Enter SSO URLs*


8. Under the <u>Authentication</u> section, click the **Edit** button. 
9. In the <u>SSO secret</u> field, click the **Reset secret** button. 
10. A confirmation modal appears. Click the **Reset** button. 


![A confirmation modal requires a user to confirm whether they want to change the SSO secret.](https://images.ctfassets.net/cl3wt5ehhnlv/2UAwfrV35HHQxlAhqT3eiM/110d7241be234e7e9e897afc5392f2ac/SSO_secret.png)

*Set an SSO secret*

 
11. The new secret value displays _only once_. Click the **Copy** icon to copy the new secret value, then store it securely. 


![The new secret secret value appears only once for a user to copy and store. ](https://images.ctfassets.net/cl3wt5ehhnlv/6Sie4bxRwnfcw0LPgUKgmP/30848931b7c14d855caedc8b5b3d6f18/SSO_secret-value.png)

*New SSO secret value *

 
12. Click the **Save** button to finish the SSO destination setup. 


![A user resets the secret. After copying and storing the secret, the user clicks the Save button. ](https://images.ctfassets.net/cl3wt5ehhnlv/C6nQlBdJzk0WfdNiOVzab/29a819121aae1508cb5b766da1b045e9/sso-destination-configure-secret.gif)

*Configure the secret value*



## Delete an SSO destination

1. Log in to the Redox dashboard.
2. From the navigation menu, click the **Developer** page.
3. By default, the <u>Sources</u> tab opens. Click the **Destinations** tab. 
4. In the table, click the **SSO destination row** you want to delete. 
5. The <u>Details</u> page opens. Click the **Delete** button in the top-right corner.  
6. A confirmation modal appears. Click the **Delete** button to proceed.


![The Delete button appears under the Delete configuration section of the destination settings.](https://images.ctfassets.net/cl3wt5ehhnlv/5V25uuHpdkwgs5ulcxKhfw/22422c50f0f8851c2a455bbfaf27e7c1/sso-destination-delete.gif)

*Delete an SSO destination*


7. The SSO destination is deleted.