I have turned on single sign-on with private boards so users must log in to our application to see Canny. We are also using a custom domain. The redirect URL that Canny uses in the single sign-on flow is the canny.io URL instead of our custom domain.