Updating Your App’s SSO Configuration to Include Knack.com

Configure your SSO settings to support both knackhq.com and knack.com domains during the transition period.

This guide will walk you through updating your SSO settings for Google Workspace or Microsoft Entra ID (Azure AD) to support both knackhq.com and knack.com domains. This ensures continued access before and after Knack transitions to knack.com on June 10, 2025.

Important: Until the cutover on June 10, you should include both knackhq.com and knack.com in your SSO configuration to avoid any login issues.

For Google Workspace

  1. Open Google Cloud Console

  2. Go to Credentials

    • Navigate to APIs & Services > Credentials from the left-hand menu.

  3. Edit Your OAuth 2.0 Client ID

    • Find and select the OAuth 2.0 Client ID used by your Knack app.

4. Update Authorized JavaScript Origins:

Under the "Authorized JavaScript origins" section:

  • Keep existing https://{accountSlug}.knackhq.com

  • Add: https://{accountSlug}.knack.com

Optional: Add: https://apps.knack.com


5. Update Authorized redirect URIs:

Under the "Authorized redirect URIs" section:

  • Keep existing https://{accountSlug}.knackhq.com/{appSlug}

  • Add: https://{accountSlug}.knack.com/{appSlug}

Optional: Add: https://apps.knack.com/{accountSlug}/{appSlug}


6. Save Changes:
    • Click the "Save" button to apply your updates.​

⚠️ Reminder: These URLs must exactly match the domain and path of the browser window initiating the login. Origins and redirect URIs should use the same domain to avoid errors.

For Microsoft Entra ID (formerly Azure Active Directory):

  1. Open Microsoft Entra Admin Center

  2. Navigate to App Registrations

    • Click App registrations from the left-hand menu.

  3. Select Your Knack Application

    • Choose the app associated with your Knack SSO setup.

  4. Update Redirect URIs

    • Under Manage > Authentication:

      • In the "Redirect URIs" section:

        • Add:

          • https://{accountSlug}.knack.com/{appSlug}

          • https://apps.knack.com/{accountSlug}/{appSlug} (optional but recommended)

        • Keep: https://{accountSlug}.knackhq.com/{appSlug} until after June 10

  5. Click Save.

⚠️ Make sure the domain in the redirect URI matches the domain in the browser where login is initiated.

*For Customers Using Next-Gen Apps

If you're using or preparing to use Knack’s Next-Gen Builder, you must include the apps.knack.com domain in your configuration.

How to Check if You're Using a Next-Gen App:

  • Open any table in your Knack builder.

  • If the URL contains builder-next, you're on a Next-Gen App.

Testing Your SSO Configuration

After updating your SSO settings:

  • Perform a test login to your Knack app using SSO.

  • Confirm the login completes successfully across all supported domains.