> [!CAUTION]
> **Caution:** This documentation covers Edge for Private Cloud 4.51.00, which is no longer supported. Google does not provide security patches, bug fixes, or technical support for this version. The current supported version is 4.54.00. See the [Edge for Private Cloud documentation](https://docs.apigee.com/private-cloud/latest/overview) for the current version, or [All versions](https://docs.apigee.com/private-cloud/versions) to compare releases.

> [!WARNING]
> **NOTE:** This section applies to using an external IDP with the **new Edge UI** . It is not intended for users of the **Classic
> UI**.

After installing the Apigee SSO module, you must configure the New Edge UI to support your
external IDP.

> [!NOTE]
> **Note:** Installing SSO does not depend on whether you are using the Classic UI or the New UI. However, the New Edge UI requires that SSO be installed.

After you enable an external IDP on the Edge UI, the Edge UI uses OAuth to connect to the
Management Server. You do not have to worry about expiring OAuth tokens between the Edge UI and
the Edge Management Server. Expired tokens are automatically refreshed.

> [!NOTE]
> **NOTE:** Automatic refresh of tokens only occurs for the token use by the Edge UI to make calls to the Management Server. Tokens generated for users when they log in to the Edge UI expire in one hour and the refresh token expires in 12 hours.

You must create a configuration file to set up the Edge UI.

```
IP1=hostname_or_IP_of_apigee_SSO
# Comma separated list of URLs for the Edge UI,
# in the format:  http_or_https://IP_or_hostname_of_UI:3001.
# You can have multiple URLs when you have multiple installations
# of the Edge UI or you have multiple data centers.
EDGEUI_PUBLIC_URIS=http_or_https://IP_or_hostname_of_UI:3001

# Publicly accessible URLs for Edge UI.
EDGEUI_SSO_REGISTERED_PUBLIC_URIS=$EDGEUI_PUBLIC_URIS

# Required variables
# Default is "n" to disable external IDP support.
EDGEUI_SSO_ENABLED=y

# Information about apigee-sso.
# Externally accessible IP or DNS of apigee-sso.
SSO_PUBLIC_URL_HOSTNAME=$IP1
SSO_PUBLIC_URL_PORT=9099
# Default is http. Set to https if you enabled TLS on apigee-sso.
SSO_PUBLIC_URL_SCHEME=http

# SSO admin credentials as set when you installed apigee-sso.
SSO_ADMIN_NAME=ssoadmin
SSO_ADMIN_SECRET=Secret123

# The name of the OAuth client used to connect to apigee-sso.
# The default client name is edgeui.
EDGEUI_SSO_CLIENT_NAME=edgeui
# Oauth client password using uppercase, lowercase, number, and special chars.
EDGEUI_SSO_CLIENT_SECRET=ssoClient123

# If set, the existing EDGEUI client is deleted and new one is created.
# The default value is "n".
# Set to "y" when you configure your external IDP and change the value of
# any of the EDGEUI_* properties.
EDGEUI_SSO_CLIENT_OVERWRITE=y
```

**To configure the Edge UI to enable support for your external IDP:**

1. Execute the following command:

   ```
   /opt/apigee/apigee-service/bin/apigee-service edge-management-ui configure-sso -f configFile
   ```

   For Classic UI, use the `edge-ui` component rather than
   `edge-management-ui`.

To later change these values, update the configuration file and execute the command again.