This page is the detail for Setup overview — Step 1: Configure app & client.
Create the Mosaic application that serves your business customers, add a client for it, and choose how much of the sign-in flow Mosaic orchestrates.
Choose how members sign in before configuring the client. The client's Login Experience setting decides who drives the sign-in flow: a journey or your customer-facing application.
A journey drives the flow. The Login screens setting on the SSO client group determines who renders the screens and which B2B capabilities are available:
Hosted by Transmit Security — journey steps resolve the member's organization, apply the organization authentication configuration, handle members who belong to more than one organization, and register the authenticators the application requires.
The journey reads the application's authentication configuration at sign-in and applies the configured methods (you'll define these later in Configure B2B settings; for now, choose the login experience). This automatic handling is available only with Mosaic-hosted screens.
Self managed (Custom UI) — your application provides the login UI, and a journey controls the sign-in flow. You implement the logic to identify the member's organization and apply its authentication configuration. Follow Build your SSO page to connect your UI to the journey with the Orchestration SDK.
Your application controls the sign-in flow and provides the login UI. It calls Mosaic's APIs to authenticate the member and obtain tokens.
Before calling Mosaic, your application identifies which organization the member is signing in to. You implement the authentication logic required by each organization.
First, complete the setup in this chapter through Set members. Then follow Implement B2B login with APIs to implement the sign-in flow, including organization identification.
In the Admin Portal, go to Applications and select + Add application. For the full set of application settings, see Create Mosaic applications.
An application can serve B2B alone: you don't need an existing B2C setup to use it for organizations and members.
In the Admin Portal, go to Applications > your app > Clients tab and select + Add client. This opens the client creation wizard.
In the wizard's third step, Login Experience, configure the model you chose:
- Journey-orchestrated — select an SSO client group and the Journey to run. On the SSO client group, set Login screens to Hosted by Transmit Security or Self managed (Custom UI). For custom screens, provide your own Login page URL.
- Application-controlled — select this option to have your customer-facing application drive the sequence and provide the screens.
For the full set of client settings, see Manage clients.
The B2B settings tab lets you create a client without leaving it, from + Add client at the bottom of the Client for inviting members list. It's the same client and the same settings — see Configure the invite flow.
The rest of the B2B setup is the same whichever model you chose: the invite flow, the Org admin portal, roles, organizations, and members all apply.
After configuring the client, continue with Configure B2B settings. If you follow one of the linked integration guides, return to the B2B setup flow afterwards.