You will need:
The following provisioning features are supported:
Open a new browser tab and log in at
Enter the client ID and client secret from above.
For the configuration endpoint, enter the following string:
Enter your primary domain name in the Domain Whitelist.
Enable Single Sign-On
Keep this tab open for the next step, where you will need the values from User Group Synchronization Details.
When you're finished, the Manage API Client Access screen page should resemble this: