This configuration applies to SSO authentication only. Vault Session ID authentication does not require configuration.

To configure this feature:

1. Ensure Configuring X-Pages is complete.
2. Navigate to Business Admin > Objects > xpages_sso_configuration__v.
3. Select Create.
   
4. Enter the following information as found in your SSO configuration:
• API name
• Authentication endpoint
• Token endpoint
• Client ID
• Client secret
5. Copy the Authorization Redirect URI and add it to your SSO configuration.

6. Add a space-delimited list of custom scopes in the Custom Scopes field. These scopes are appended to the SSO IDP access token request. Only valid OAuth scope-token characters and spaces are allowed. This step is optional.

7. Select Save.

To configure this feature:

1. Ensure Configuring X-Pages is complete.

2. Navigate to Admin > Users & Groups > Permission Sets.

3. Select the appropriate permission set.

4. Select Objects.

5. Grant the following permissions:

   Object	Object ermission	Object Types	Fields	Field Permission
   xpages_sso_configuration__v	R	OAuth 2.0 / OIDC	API Name Authorization endpoint Client ID Client Secret Created By Created Date Custom Scopes (optional) Last Modified By Last Modified Date Status Token endpoint	Read

External connections in Vault can be authorized using an SSO access token or a Vault Session ID. Content developers can use either of the following request methods to access data from the specified external application directly from an X-Page:

• Using SSO Authentication - If the external application uses OAuth-based SSO, content developers can use the getSSOAccessToken method to retrieve a valid access token that can be passed through a customer-defined authentication process for the external application.
• Using Vault Session ID Authentication - X-Pages content developers can use the getVaultSessionId method to retrieve a valid session ID that can be used to communicate with Vault APIs or passed through a customer-defined authentication process for the external application.

End users can view data from Vault CRM and external sources combined without navigating away from the Vault CRM app to authenticate to the external source.

Vault CRM Admins can view information about session IDs or access token requests in the Activity Log to ensure only appropriate X-Pages content is using them.