Prerequisites

  • Administrative access to your Identity Provider (IdP)
  • The Domain you want to enable for SSO
1

Prepare Required Information

Configure Profound as an OIDC application with your IdP:
  • Icon: Profound Logo Shown Below
  • App Name: Profound
  • App Description: Profound is the all-in-one platform for monitoring and controlling your company’s presence in generative AI applications.
Profound LogoYou’ll need to gather the following details from your IdP:
  • Discovery Endpoint: Your IdP’s OIDC configuration endpoint
  • Client ID: The unique identifier for your application
  • Client Secret: The secret key for secure communication
2

Request SSO Configuration

Email the following information securely to support@tryprofound.com:OIDC configuration from Step 1:
  • Discovery Endpoint
  • Client ID
  • Client Secret
We recommend using an encrypted zip file with password that is provided separately.
3

Configure Your IdP

After we receive your information, we’ll provide you with:
  • Authorized Redirect URI: The callback URL for your IdP to return users after authentication
Add this URI to your IdP’s allowed redirect URLs/callback URLs list.
4

Configure Scopes and Claims

In your IdP, ensure the following scopes are enabled: Required:
  • openid
  • email
  • profile
Ensure these claims are included in your IdP’s response:
  • Email addressemail
  • First namegiven_name
  • Last namefamily_name
  • Email verificationemail_verified
5

Testing

Once you’ve completed the configuration:
  1. Notify support@tryprofound.com that you’re ready for testing
  2. We’ll verify the integration
  3. Test the login flow with a sample user account

Notes

  • Subdomains must be explicitly configured unless your domain is an eTLD+1
  • For security purposes, send sensitive configuration details through secure channels
  • Contact support@tryprofound.com if you need assistance during setup
After SSO is enabled, users with email addresses matching your configured domains will automatically be directed to your IdP for authentication.