SSO Generic Onboarding

Purpose

Generic SAML IdP onboarding for SailPoint Entro.

Complete the following:

1. Request SSO support

   Request SSO support from SailPoint Entro Support.

2. Receive SP metadata or SP values

   SailPoint Entro provides SP metadata or SP values.

3. Provide IdP metadata

   Option A: Provide IdP Metadata URL to SailPoint Entro.

4. Provide manual IdP fields

   Option B: Configure manual fields in SailPoint Entro:

   • SSO URL (IdP SSO endpoint)

   • IdP Issuer (Entity ID)

   • X.509 Certificate (PEM)

5. Create SAML app in IdP

   Create SAML app in IdP using SP values.

6. Map attributes

   Map attributes:

   • email → primary identifier

   • givenName / firstName

   • familyName / lastName

   • groups (if available)

7. Configure group claim

   Configure group claim format and provide attribute name to SailPoint Entro.

8. Assign users/groups

   Assign users or groups in IdP to the SAML app.

9. Share metadata and allowed domains

   Share metadata or manual fields and allowed domains with SailPoint Entro.

10. Test and troubleshoot

    Test in an incognito/private window. If login fails, provide a sample SAML assertion to SailPoint Entro for troubleshooting (include timestamps).

What to Send to SailPoint Entro

• IdP Metadata URL OR SSO URL + Issuer + X.509 PEM

• Allowed domains

• Attribute mappings and group claim name

• Test user email and timestamp