SSO: Add a reply URL / redirect URI

This article is intended for:

Admin

Related module:

As part of the upgrade to its security infrastructure, Eurécia is updating its user account management system and SSO authentication.

🎯 The objective is simple:

strengthen access security,
make connections more reliable,
rely on a more robust and sustainable authentication infrastructure.

This evolution involves a one-time technical action on your side: add a redirect URI in your identity provider (IDP) allowing authentication via SSO.

💡 What is a redirect URI used for?

A redirect URI (or reply URL) is the address to which the identity provider (IDP) redirects the user after successful authentication, along with their access token.

Specifically:

the application requests a connection by specifying a URI,
the user authenticates,
the IDP redirects to this declared URI with the token.

🔒 If the URI is not configured in your IDP, the connection will fail.

🔑 Standard login / password authentication

In addition to the modification to be made for SSO authentication, employees using login / password authentication will be required to reset their password.

This password reset is mandatory.

Microsoft Entra ID (formerly Azure AD)

This configuration must be completed by September 15, 2026 at the latest.

After this date, the old system will be deactivated.
Without this update, your users will no longer be able to log in via SSO.

Step 1: Add the redirect URI in Entra ID

Go to the Microsoft Entra admin center, in 'App registrations', select your application.
Under 'Manage', select Authentication,

Under 'Redirect URIs', select 'Add a platform'.
- Select the platform type 'Web',
- Add the URL provided by Eurécia in the format: https://plateforme-idp.eurecia.com/realms/prod/broker/saml-{ID_COMPANY}/endpoint

Click 'Configure' (Save).

For more information, you can also visit the Microsoft Entra help center: How to add a redirect URI to your application.

Step 2: Direct login bookmark

If you use a direct login link or a login bookmark, it must be replaced with a new bookmark in the following format:

https://plateforme.eurecia.com/eurecia/login.do?kc_idp_hint=saml-{ID_COMPANY}

The configuration of this new link must be completed AFTER adding the redirect URL.

Okta

This configuration must be completed by September 15, 2026 at the latest.

After this date, the old system will be deactivated.
Without this update, your users will no longer be able to log in via SSO.

Step 1: Add the redirect URI in OKTA

Go to the OKTA admin console,
In 'Applications', select 'Applications',
Select the application set up for Eurécia,

In the 'General' tab, scroll down to 'General settings' and click 'Edit',
Go to the 'Login' section and click 'Add URI',
Add the URL provided by Eurécia in the format: https://plateforme-idp.eurecia.com/realms/prod/broker/saml-{ID_COMPANY}/endpoint

Save.

For more information, you can also visit the Okta help center: OpenID Connect (OIDC) Sign-in Redirect URI

Step 2: Direct login bookmark

If you use a direct login link or a login bookmark, it must be replaced with a new bookmark in the following format:

https://plateforme.eurecia.com/eurecia/login.do?kc_idp_hint=saml-{ID_COMPANY}

The configuration of this new link must be completed AFTER adding the redirect URL.

Google Directory

This configuration must be completed by September 15, 2026 at the latest.

After this date, the old system will be deactivated.
Without this update, your users will no longer be able to log in via SSO.

Step 1: Add the redirect URI in Google

Go to the Google Cloud admin console,
Select your project,

Select the 'Credentials' section,
In the OAuth 2.0 Client IDs list, click on the Web application client used for authentication to Eurécia,
Click 'Edit Settings' then 'Add URI',
- Add the URL provided by Eurécia in the format: https://plateforme-idp.eurecia.com/realms/prod/broker/saml-{ID_COMPANY}/endpoint
Click 'Save'.

For more information, you can also visit the Google Identity help center: OpenID Connect.

Step 2: Direct login bookmark

If you use a direct login link or a login bookmark, it must be replaced with a new bookmark in the following format:

https://plateforme.eurecia.com/eurecia/login.do?kc_idp_hint=saml-{ID_COMPANY}

The configuration of this new link must be completed AFTER adding the redirect URL.

Keywords: SSO · authentication · login · MFA · Oauth · SAML · Azure AD · IDP · identity provider · ENtra ID · OKTA · Google Cloud

In this article: