---
title: "Configuring ID Entrance SSO"
slug: "configuring-id-entrance-sso"
updated: 2026-11-02T12:51:13Z
published: 2026-11-02T12:51:13Z
canonical: "knowledge.catonetworks.com/configuring-id-entrance-sso"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.catonetworks.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring ID Entrance SSO

This article explains how to configure ID Entrance as the Single Sign-On (SSO) provider for remote-access users, clientless users, and Cato Management Application (CMA) admins in your account. With SSO, users authenticate to the Cato Client with their identity provider credentials. For more information, see [SSO Authentication for Users with Cato](/v1/docs/sso-authentication-for-users-with-cato).

## Configuring ID Entrance as an SSO Provider

To configure ID Entrance as your SSO provider, first complete the configuration on the ID Entrance portal with the ID Entrance Support Center. Then enter the integration details in the Cato Management Application (CMA) and configure the user authentication settings.

## Step 1: Configure the ID Entrance Portal

For configuration on the ID Entrance side, contact the ID Entrance Support Center:

- **Phone:** 03-6732-7766 (within Japan) or +81-3-6732-7766 (from outside Japan).
- **Email:** [ident-supp@canon-its.co.jp](mailto:ident-supp@canon-its.co.jp).
- **Business hours:** Monday to Friday, 9:00 AM to 5:00 PM (Japan time), excluding public holidays and other company holidays.

When you contact the support center, provide the following information:

- Administrator's name
- Contract number

After completing the ID Entrance configuration, make sure you have the following integration details to enter in the CMA:

- **Well-Known URL:** The OpenID Connect (OIDC) discovery URL.
- **Client ID**
- **Client Secret**

## Step 2: Configure ID Entrance in the CMA

Enter the integration details from Step 1 to add ID Entrance as an SSO provider.

**To configure ID Entrance as an SSO provider:**

1. In the CMA, from the navigation menu, click **Access > Single Sign-On**.
2. Click **New**.
3. From the **Identity Provider** drop-down menu, select the ID Entrance provider. ![](https://cdn.document360.io/81d0367c-2b69-4ba8-b412-1c8f46ce677e/Images/Documentation/image(272).png?sv=2026-02-06&spr=https&st=2026-11-10T16%3A55%3A55Z&se=2026-11-10T17%3A55%3A55Z&sr=c&sp=r&sig=m8O%2BJ19A0lCeg%2BPcpsw1fmT%2B2jk%2BfkDqZ%2BrUjnxqD8w%3D)
4. Enter a **Name** to identify this integration.
5. (Optionally) Enable the **Default** toggle to configure ID Entrance as your default SSO provider. If you are configuring multiple SSO providers, see [Configuring Multiple Identity Providers](/v1/docs/configuring-multiple-identity-providers).
6. Enter the **Well-Known URL** and **Client ID** from Step 1.
7. Click **Edit Client Secret** and enter the **Client Secret** from Step 1.
8. Click **Apply**.

### Configuring User Authentication Settings

Configure SSO authentication for users and define how long the [Cato authentication token](/v1/docs/sso-authentication-for-users-with-cato) remains valid. The **Token validity** settings define the time, in days or hours, that users remain authenticated since their last login. Users must reauthenticate when this period expires. With **Always Prompt**, users must authenticate each time they log in to the Client.

**To configure user authentication settings:**

1. On the **Access > Single Sign-On** page, enable SSO authentication for users.
2. (Optionally) Configure the **Token validity**, **Cookie type**, and **Duration** settings.
3. Click **Save**.