Integrated BIM tools, including Revit, AutoCAD, and Civil 3D
Professional CAD/CAM tools built on Inventor and AutoCAD
To begin the configuration of the single sign-on (SSO) implementation, the primary admin (or SSO admin) must have a domain set up and have access to the admin account with the identity provider. Note that the provider must have the ability to set up a SAML connection. Additionally, you should have notified all users that the change to SSO is coming and identified a select group of users that will be testing the connection for you.
Please take note that turning on SSO will take effect immediately. You can only turn it off by contacting Autodesk Support. It’s important to set it up correctly and test the connection before enabling it so that users will not have interrupted access to Autodesk products and services.
The following are the main steps in SSO configuration. For each step, a link has been provided to the Single Sign-on Configuration Guide to provide additional help documentation and a video has been included to show you the process.
1. Add your domain(s) to your Autodesk account and verify it so that it can be used for SSO. Verifying your domain confirms that you are the owner or admin for your organization’s domain name. You will need to add the email domain(s) that your Autodesk users use to sign in to your organization. Refer to the Add and Verify Domains topic for additional instructions.
Any referenced datasets can be downloaded from "Module downloads" in the module overview.
Transcript
00:01
Hello, I am going to walk you through how to set up your Autodesk Single Sign-on with your identity provider.
00:10
As part of that process, you should be having access to your domain host, have an admin account with your identity provider.
00:21
The second step is to add and verify your domains.
00:27
As part of that verifying your domain, you should be logging in as an account administrator,
00:35
as a primary admin or as an SSO admin onto your Autodesk manage portal.
00:41
Then, within the user management section of By User tab submenu, you should do this user management page.
00:51
Within that workflow, you would be automatically redirected within the team that you are part of and where you want to set up your Single Sign-on.
01:03
Within this user management page, you will see this gear icon.
01:07
Clicking this gear icon will navigate you to the settings.
01:12
On clicking onto the Manage SSO button, you would be navigated on setting up your domains.
01:22
As a part of first step, you should be able to add your own domain and verify your domain.
01:30
Now you will see over here, there is this Add Domains button.
01:35
Now, what I am going to do is that I am going to add my domain, and through the self-serve workflow that Autodesk has provided,
01:45
I should be able to verify my domain without requiring any help from the Autodesk support team.
01:55
My domain is-
02:02
I add this particular domain, and the next step is getting this domain verified.
02:09
I click on this Verify Domain button.
02:12
You will see there are two options to verify your domain.
02:16
One is clicking on this link through which Autodesk provides an HTML verification file,
02:25
and you, as an IT administrator, need to upload this HTML file onto your domain host server,
02:34
and the verification could be done within few minutes.
02:38
The second way is creating a text record on your DNS side, but this can take up to 72+ hours depending on the service provider to service provider.
02:50
But the most recommended way is to upload your HTML file onto your domain host.
02:55
In this way, you can verify your domain within minutes.
03:01
Now, I click onto this Verify HTML button link and I save this HTML file onto a local machine.
03:11
Now, let's verify what is there into this particular file that Autodesk is providing.
03:18
This is nothing, but some information to identify the domain that the user is uploading to the Autodesk side.
03:28
I will login to my domain host server, and within the domain host server, I would upload my HTML file, which was provided by Autodesk.
03:44
Now, it happens that my domain host right now is in HostGator.
03:49
It could be any service provider.
03:51
It could be on Azure, GCP, AWS, or even you could have your own servers who is hosting your domain host.
04:02
I would select this particular file and upload this file on to my domain host's root folder.
04:11
Now, I go back to my Autodesk account portal and just hit the Verify now button.
04:19
Once I hit this Verify now button, you see that the domain was verified within minutes,
04:28
and without taking any further help from the Autodesk support team.
Video transcript
00:01
Hello, I am going to walk you through how to set up your Autodesk Single Sign-on with your identity provider.
00:10
As part of that process, you should be having access to your domain host, have an admin account with your identity provider.
00:21
The second step is to add and verify your domains.
00:27
As part of that verifying your domain, you should be logging in as an account administrator,
00:35
as a primary admin or as an SSO admin onto your Autodesk manage portal.
00:41
Then, within the user management section of By User tab submenu, you should do this user management page.
00:51
Within that workflow, you would be automatically redirected within the team that you are part of and where you want to set up your Single Sign-on.
01:03
Within this user management page, you will see this gear icon.
01:07
Clicking this gear icon will navigate you to the settings.
01:12
On clicking onto the Manage SSO button, you would be navigated on setting up your domains.
01:22
As a part of first step, you should be able to add your own domain and verify your domain.
01:30
Now you will see over here, there is this Add Domains button.
01:35
Now, what I am going to do is that I am going to add my domain, and through the self-serve workflow that Autodesk has provided,
01:45
I should be able to verify my domain without requiring any help from the Autodesk support team.
01:55
My domain is-
02:02
I add this particular domain, and the next step is getting this domain verified.
02:09
I click on this Verify Domain button.
02:12
You will see there are two options to verify your domain.
02:16
One is clicking on this link through which Autodesk provides an HTML verification file,
02:25
and you, as an IT administrator, need to upload this HTML file onto your domain host server,
02:34
and the verification could be done within few minutes.
02:38
The second way is creating a text record on your DNS side, but this can take up to 72+ hours depending on the service provider to service provider.
02:50
But the most recommended way is to upload your HTML file onto your domain host.
02:55
In this way, you can verify your domain within minutes.
03:01
Now, I click onto this Verify HTML button link and I save this HTML file onto a local machine.
03:11
Now, let's verify what is there into this particular file that Autodesk is providing.
03:18
This is nothing, but some information to identify the domain that the user is uploading to the Autodesk side.
03:28
I will login to my domain host server, and within the domain host server, I would upload my HTML file, which was provided by Autodesk.
03:44
Now, it happens that my domain host right now is in HostGator.
03:49
It could be any service provider.
03:51
It could be on Azure, GCP, AWS, or even you could have your own servers who is hosting your domain host.
04:02
I would select this particular file and upload this file on to my domain host's root folder.
04:11
Now, I go back to my Autodesk account portal and just hit the Verify now button.
04:19
Once I hit this Verify now button, you see that the domain was verified within minutes,
04:28
and without taking any further help from the Autodesk support team.
2. Set up the connection between your Autodesk account and your identity provider. How the connection is established is dependent on your identity provider (e.g., Microsoft Azure, Okta, ADFS, OneLogin, PingOne, PingFederate, or Google Cloud Identity). For detailed instructions on how to set up SSO for your identity provider, refer to the Set up your connection articles.
Any referenced datasets can be downloaded from "Module downloads" in the module overview.
Transcript
00:04
Hi there, now that you are able to set up and verify your domain, now it is time to set up your SSO connection.
00:14
For the SSO connection, you need to hit the Manage SSO button.
00:21
Within this Manage SSO button, you need to now click the Setup SSO Connection button.
00:28
What I am going to assume over here is that on your company side you have Microsoft Azure Active Directory as your identity provider,
00:40
and through this particular video, I am going to show how to set up the Autodesk Single sign-on connection with your Microsoft Azure AD.
00:53
Now, before we start, you also need to be logged in onto the Azure portal as an admin,
01:01
so that you can set up the necessary connection configuration that is needed to set up your Autodesk Single sign-on workflow.
01:12
Here, on the manage portal I provide a name to the connection, Test Connection,
01:21
any name it could be from your side,
01:24
and then I am going to hit Microsoft Azure as my identity provider.
01:31
Just to help you understand, Autodesk supports other identity providers,
01:37
as you can see in this drop-down menu option, like OneLogin, Okta, PingFederate, PingOne,
01:43
as well as Active Directory Federation Services or ADFS as well.
01:52
The help documentation, which is there, provides the necessary guide on how to set up your Single sign-on connection with Microsoft Azure AD.
02:03
Now, once I select my identity provider as Microsoft Azure, you need to go back to your Azure portal,
02:15
and from there hit Azure Active Directory menu option.
02:20
Within this, you will find this Enterprise Applications menu options.
02:26
You need to click that, and from there, you need to hit the new application button to set up your connectivity.
02:35
Now, clicking this particular link opens up the Azure AD gallery.
02:41
What Autodesk has done, Autodesk has provided Microsoft with this gallery app,
02:49
if I type in Autodesk, and you will see over here, Autodesk SSO gallery app opens up.
02:57
What it is doing is that it has provided Microsoft with a preconfigured template,
03:03
that consists the necessary binding information required to set up this connection.
03:10
First I give it this name, then I go and create this app.
03:26
Once this gallery app is created, you need to go to the Setup Single sign-on menu option.
03:36
From there, you need to hit the SAML menu option, and from there you need edit the SAML configurations.
03:47
I hit the edit button, and then you are presented this basic SAML configuration page.
03:54
Now, you need to provide some of the details regarding the replay URL.
04:01
Now, what should be the value that is very much documented in our help documentation.
04:07
If you come into this section of the help documentation, you will find the reply URL value is provided here.
04:14
I copy and I paste it over here, and as the documentation says, it needs to be some unique ID.
04:21
I am going to punch in some unique ID, and Microsoft is going to show you whether this is a unique one or not.
04:28
After that, I also need to punch in the sign-on URL details that is also provided in the help guide.
04:37
This is the URI of this sign-on URL,
04:42
and I provide the necessary details, and then I hit the Save button.
04:51
Once I save, the value for this basic SAML configuration is saved.
04:59
Now, I go back to the base page.
05:06
I will say that I don't want to test the connection yet because my setup is not yet complete, and I go to the SAML certificate section.
05:15
Here, you will find the federation metadata XML file that is already created from your Azure side.
05:24
I need to go and download this particular file.
05:28
Once I save it, I need to upload this XML file onto the Autodesk account admin portal.
05:36
But before I upload, let's check what is the value that is provided on the Microsoft side.
05:43
This is basically the XML file that provides the necessary mapping information for your first name, last name, email, object GUID,
05:53
along with the public key token that is required to set up the connectivity between your Azure portal as well as the Autodesk Single sign-on side.
06:06
I go back to my Autodesk portal and I upload the file that I downloaded from Microsoft.
06:16
I navigate to the file and I select, and I upload the file onto the Autodesk side.
06:23
As soon as I hit the upload button, you will see the entity ID, the sign-on URL, what is the binding method,
06:32
post or redirect that is already populated in the necessary feed, and you as an IT administrator need not think about what would be these values.
06:43
After that, I hit the Next button.
06:46
Hitting the next button, you will see that the attributes are now mapped.
06:52
Now what you need to do is that now Autodesk has provided a XML file that you need to download,
07:01
that has the necessary mapping information as well as the public key token from the Autodesk side.
07:08
I go and download this particular file and save,
07:14
and before again I upload, let's check what is the value which is there onto this particular XML file.
07:21
Again, you will see that there is the public key token required for the information handshake,
07:29
along with some of the mapping attributes that is provided from the Autodesk side.
07:38
I go back to the Microsoft Azure portal, and there you will find there is an upload metadata file option,
07:47
where you need to upload this XML file that you downloaded from the Autodesk side.
07:53
I go and upload this particular file on the Microsoft side, and I hit Add.
08:01
Once you add this information, you need to save again the SAML configuration change that happened on the Microsoft side.
08:14
Once this SAML configuration is saved, I go back to the Azure on my account admin portal and I hit the Next button.
08:24
Now, as an administrator, you need to test your connection.
08:30
But before doing that, you need to add the user onto your enterprise application side so that you can test out the connectivity.
08:43
Before you start testing the connection, you need to go back on your Azure AD side and basically add a particular user,
08:53
which is already there in your directory to this gallery app.
08:60
Over here, I have this particular user.
09:04
What I am going to do is that I am going to navigate to my enterprise application,
09:11
and add the user into that recently created enterprise application.
09:21
Here I navigated to my app and here, within users and groups,
09:29
you will see, I am going to add this particular user to this enterprise app.
09:37
I go here, I search for this user, okay.
09:50
Here is an employee that I want to add.
09:54
I select this particular user, and I assign to this gallery app.
10:00
Now, you can see my user is added.
10:05
I go back to my Autodesk account admin portal, and to test the connection, I will be asked to provide the employee credentials on your domain.
10:17
I punch in.
10:35
I hit the sign-in button, and now you will see this particular confirmation page coming up.
10:48
If you get this particular success message, it means that your Single sign-on setup is now complete.
10:58
Once I close, your testing of the connection is completed.
11:02
Now, you hit the Next button.
11:05
Now, once you test your connection, you need to link your connection with the already verified domain.
11:13
My domain is already listed over here.
11:16
I save the connection.
Video transcript
00:04
Hi there, now that you are able to set up and verify your domain, now it is time to set up your SSO connection.
00:14
For the SSO connection, you need to hit the Manage SSO button.
00:21
Within this Manage SSO button, you need to now click the Setup SSO Connection button.
00:28
What I am going to assume over here is that on your company side you have Microsoft Azure Active Directory as your identity provider,
00:40
and through this particular video, I am going to show how to set up the Autodesk Single sign-on connection with your Microsoft Azure AD.
00:53
Now, before we start, you also need to be logged in onto the Azure portal as an admin,
01:01
so that you can set up the necessary connection configuration that is needed to set up your Autodesk Single sign-on workflow.
01:12
Here, on the manage portal I provide a name to the connection, Test Connection,
01:21
any name it could be from your side,
01:24
and then I am going to hit Microsoft Azure as my identity provider.
01:31
Just to help you understand, Autodesk supports other identity providers,
01:37
as you can see in this drop-down menu option, like OneLogin, Okta, PingFederate, PingOne,
01:43
as well as Active Directory Federation Services or ADFS as well.
01:52
The help documentation, which is there, provides the necessary guide on how to set up your Single sign-on connection with Microsoft Azure AD.
02:03
Now, once I select my identity provider as Microsoft Azure, you need to go back to your Azure portal,
02:15
and from there hit Azure Active Directory menu option.
02:20
Within this, you will find this Enterprise Applications menu options.
02:26
You need to click that, and from there, you need to hit the new application button to set up your connectivity.
02:35
Now, clicking this particular link opens up the Azure AD gallery.
02:41
What Autodesk has done, Autodesk has provided Microsoft with this gallery app,
02:49
if I type in Autodesk, and you will see over here, Autodesk SSO gallery app opens up.
02:57
What it is doing is that it has provided Microsoft with a preconfigured template,
03:03
that consists the necessary binding information required to set up this connection.
03:10
First I give it this name, then I go and create this app.
03:26
Once this gallery app is created, you need to go to the Setup Single sign-on menu option.
03:36
From there, you need to hit the SAML menu option, and from there you need edit the SAML configurations.
03:47
I hit the edit button, and then you are presented this basic SAML configuration page.
03:54
Now, you need to provide some of the details regarding the replay URL.
04:01
Now, what should be the value that is very much documented in our help documentation.
04:07
If you come into this section of the help documentation, you will find the reply URL value is provided here.
04:14
I copy and I paste it over here, and as the documentation says, it needs to be some unique ID.
04:21
I am going to punch in some unique ID, and Microsoft is going to show you whether this is a unique one or not.
04:28
After that, I also need to punch in the sign-on URL details that is also provided in the help guide.
04:37
This is the URI of this sign-on URL,
04:42
and I provide the necessary details, and then I hit the Save button.
04:51
Once I save, the value for this basic SAML configuration is saved.
04:59
Now, I go back to the base page.
05:06
I will say that I don't want to test the connection yet because my setup is not yet complete, and I go to the SAML certificate section.
05:15
Here, you will find the federation metadata XML file that is already created from your Azure side.
05:24
I need to go and download this particular file.
05:28
Once I save it, I need to upload this XML file onto the Autodesk account admin portal.
05:36
But before I upload, let's check what is the value that is provided on the Microsoft side.
05:43
This is basically the XML file that provides the necessary mapping information for your first name, last name, email, object GUID,
05:53
along with the public key token that is required to set up the connectivity between your Azure portal as well as the Autodesk Single sign-on side.
06:06
I go back to my Autodesk portal and I upload the file that I downloaded from Microsoft.
06:16
I navigate to the file and I select, and I upload the file onto the Autodesk side.
06:23
As soon as I hit the upload button, you will see the entity ID, the sign-on URL, what is the binding method,
06:32
post or redirect that is already populated in the necessary feed, and you as an IT administrator need not think about what would be these values.
06:43
After that, I hit the Next button.
06:46
Hitting the next button, you will see that the attributes are now mapped.
06:52
Now what you need to do is that now Autodesk has provided a XML file that you need to download,
07:01
that has the necessary mapping information as well as the public key token from the Autodesk side.
07:08
I go and download this particular file and save,
07:14
and before again I upload, let's check what is the value which is there onto this particular XML file.
07:21
Again, you will see that there is the public key token required for the information handshake,
07:29
along with some of the mapping attributes that is provided from the Autodesk side.
07:38
I go back to the Microsoft Azure portal, and there you will find there is an upload metadata file option,
07:47
where you need to upload this XML file that you downloaded from the Autodesk side.
07:53
I go and upload this particular file on the Microsoft side, and I hit Add.
08:01
Once you add this information, you need to save again the SAML configuration change that happened on the Microsoft side.
08:14
Once this SAML configuration is saved, I go back to the Azure on my account admin portal and I hit the Next button.
08:24
Now, as an administrator, you need to test your connection.
08:30
But before doing that, you need to add the user onto your enterprise application side so that you can test out the connectivity.
08:43
Before you start testing the connection, you need to go back on your Azure AD side and basically add a particular user,
08:53
which is already there in your directory to this gallery app.
08:60
Over here, I have this particular user.
09:04
What I am going to do is that I am going to navigate to my enterprise application,
09:11
and add the user into that recently created enterprise application.
09:21
Here I navigated to my app and here, within users and groups,
09:29
you will see, I am going to add this particular user to this enterprise app.
09:37
I go here, I search for this user, okay.
09:50
Here is an employee that I want to add.
09:54
I select this particular user, and I assign to this gallery app.
10:00
Now, you can see my user is added.
10:05
I go back to my Autodesk account admin portal, and to test the connection, I will be asked to provide the employee credentials on your domain.
10:17
I punch in.
10:35
I hit the sign-in button, and now you will see this particular confirmation page coming up.
10:48
If you get this particular success message, it means that your Single sign-on setup is now complete.
10:58
Once I close, your testing of the connection is completed.
11:02
Now, you hit the Next button.
11:05
Now, once you test your connection, you need to link your connection with the already verified domain.
11:13
My domain is already listed over here.
11:16
I save the connection.
3. Test the connection by adding up to 30 users from your Autodesk team to the linked connection before turning on SSO. Once you have confirmed your test users can successfully log in using SSO, you can turn on SSO for the entire team. Refer to the Test and turn on SSO topic for additional instructions.
Any referenced datasets can be downloaded from "Module downloads" in the module overview.
Transcript
00:02
Now, before you turn on SSO for your complete domain, it is recommended to add test users.
00:12
This will only help you as an IT administrator to not rollout the SSO functionality for all the users that are within the domain.
00:23
It will just enable a certain bunch of users that you want them to test out if the SSO connectivity is working or not.
00:33
I hit this Add Test Users menu option.
00:37
I hit the next button.
00:40
What I am going to do, I am going to add the necessary users I want to provide access to,
00:46
to test if the SSO connectivity with Autodesk is working or not before rolling it out across all the users within my domain.
01:02
I am going to test out with a particular user within my domain.
01:09
I add this another user whom I want to access, and then I save.
01:19
Once I save, this test user is now added.
01:24
Before I ask this user to try out whether Autodesk Single sign-on is working or not,
01:31
I as an IT admin also needs to add this user onto my identity provider.
01:38
Let me go and add this particular user, over here, now I go to the Add Users section and I search for this user, which is already there in my AD.
01:52
I select this particular user and I assign this user to my Autodesk SSO 1234 enterprise app.
02:06
Now that I have added my test users, I would like to test if my test users are able to login to Autodesk portal through our Single sign-on page.
02:18
Here, I navigate to Autodesk accounts portal and I punch in the test user's email address.
02:27
Now, you will see over here, as soon as I punch in the email address of that test user,
02:33
I am now navigated to my company's Single sign-on page.
02:37
Over here, I see it is the Azure page, which has loaded up.
02:42
But for your case, if you are using your identity provider or your company's Single sign-on page,
02:50
that page would be loaded up over here.
02:53
What I do, I type in my email address and my password credential, and that's pretty much it.
03:04
Through my Single sign-on, I am able to login to Autodesk accounts portal through my Single sign-on workflow.
03:15
Now that you have tested the SSO connection for your domain with help of your test users, it is time to turn on the SSO for your complete domain.
03:25
Under the Manage SSO tab, we navigate to your connection, and inside that connection, we hit the test and turn on SSO button.
03:35
I directly go and hit this radio button to turn on SSO for my complete domain.
03:42
Here, in this page, you will be asked to confirm that you understand signing in with SSO will take immediately,
03:51
and turning off SSO requires help from Autodesk support.
03:55
Check the box to confirm.
03:58
If you want new users to automatically receive Single sign-on access, check automatically give new users access to sign in with SSO.
04:09
You can change this setting anytime under the Edit SSO access.
04:14
Now, you hit turn on SSO.
04:17
Once you hit this turn on SSO button, your SSO connection for your entire domain is in effect immediately.
Video transcript
00:02
Now, before you turn on SSO for your complete domain, it is recommended to add test users.
00:12
This will only help you as an IT administrator to not rollout the SSO functionality for all the users that are within the domain.
00:23
It will just enable a certain bunch of users that you want them to test out if the SSO connectivity is working or not.
00:33
I hit this Add Test Users menu option.
00:37
I hit the next button.
00:40
What I am going to do, I am going to add the necessary users I want to provide access to,
00:46
to test if the SSO connectivity with Autodesk is working or not before rolling it out across all the users within my domain.
01:02
I am going to test out with a particular user within my domain.
01:09
I add this another user whom I want to access, and then I save.
01:19
Once I save, this test user is now added.
01:24
Before I ask this user to try out whether Autodesk Single sign-on is working or not,
01:31
I as an IT admin also needs to add this user onto my identity provider.
01:38
Let me go and add this particular user, over here, now I go to the Add Users section and I search for this user, which is already there in my AD.
01:52
I select this particular user and I assign this user to my Autodesk SSO 1234 enterprise app.
02:06
Now that I have added my test users, I would like to test if my test users are able to login to Autodesk portal through our Single sign-on page.
02:18
Here, I navigate to Autodesk accounts portal and I punch in the test user's email address.
02:27
Now, you will see over here, as soon as I punch in the email address of that test user,
02:33
I am now navigated to my company's Single sign-on page.
02:37
Over here, I see it is the Azure page, which has loaded up.
02:42
But for your case, if you are using your identity provider or your company's Single sign-on page,
02:50
that page would be loaded up over here.
02:53
What I do, I type in my email address and my password credential, and that's pretty much it.
03:04
Through my Single sign-on, I am able to login to Autodesk accounts portal through my Single sign-on workflow.
03:15
Now that you have tested the SSO connection for your domain with help of your test users, it is time to turn on the SSO for your complete domain.
03:25
Under the Manage SSO tab, we navigate to your connection, and inside that connection, we hit the test and turn on SSO button.
03:35
I directly go and hit this radio button to turn on SSO for my complete domain.
03:42
Here, in this page, you will be asked to confirm that you understand signing in with SSO will take immediately,
03:51
and turning off SSO requires help from Autodesk support.
03:55
Check the box to confirm.
03:58
If you want new users to automatically receive Single sign-on access, check automatically give new users access to sign in with SSO.
04:09
You can change this setting anytime under the Edit SSO access.
04:14
Now, you hit turn on SSO.
04:17
Once you hit this turn on SSO button, your SSO connection for your entire domain is in effect immediately.
If you have any issues or questions about configuring your identity provider, you can click the 
icon in the lower-right corner in Autodesk Account to access the Get Help menu. Select Post-purchase support > Sign in & profile > Single sign-on (SSO). You can review the Knowledge Network articles or click Contact a support agent for further help. The Learn more about SSO link will direct you to the Single Sign-on Configuration Guide that has been referenced in the videos.
How to buy
Privacy | Do not sell or share my personal information | Cookie preferences | Report noncompliance | Terms of use | Legal | © 2025 Autodesk Inc. All rights reserved
Sign in to start learning
Sign in for unlimited free access to all learning content.Save your progress
Take assessments
Receive personalized recommendations
May we collect and use your data?
Learn more about the Third Party Services we use and our Privacy Statement. May we collect and use your data to tailor your experience?
Explore the benefits of a customized experience by managing your privacy settings for this site or visit our Privacy Statement to learn more about your options.