Generic IdP SAML 2.0 (SSO)

Service Provider Information

Copy the metadata URL to the IdP to retrieve the connection details dynamically:

Or copy the following to the IdP:

Enter the IdP's metadata URL:

Or enter the following details:

Note

Either "IdP Metadata URL" or "Single Sign On (SSO) URL", "Identity Provider Issuer", and "X.509 Certificate" are required.

Map attribute names from your IdP to supported user attributes. This will sync on every user authentication.

Enter the name of the attribute used by your IdP for group associations. We will use it to retrieve group names that can later on be mapped to roles.

Descope will provide you the domains that are used to determine which SSO configuration to load once a user chooses to authenticate using SSO.

Once all the details have been completed, test your current SSO configuration to make sure all parts are set properly.