Skip to content

Connecting Identity Providers

You can connect your identity provider to provide a simpler login experience for users in Agentic Fabric.

Before you begin, ensure you have the following information from Microsoft Entra ID or Okta:

  • Entity ID
  • Login URL for Post
  • Login URL for Redirect
  • Logout URL (optional)
  • Signing Certificate

To connect your identity provider:

  1. In the Identity Provider section, complete the following:

    • In the Entity ID field, enter the unique entity ID of your identity provider. The number must match the SAML metadata EntityID supplied by your identity provider.

    • In the Login URL for Redirect field, enter the URL where an authentication request is sent using HTTP Redirect binding.

    • In the Login URL for Post field, enter the URL where an authentication request is sent using HTTP Post binding.

    • (Optional) In the Logout URL field, enter the URL where users will be redirected when they log out or their session expires.

  2. Leave the Enable Remote Identity Provider option unchecked until you've imported the signing certificate.

  3. In the SAML Request Options section, complete the following:

    • In the Identity Mapping Attribute dropdown list, select the attribute you want to use to authenticate users. If you select a custom identity attribute, that attribute must be configured as searchable.

    • In the SAML Binding dropdown list, select Post or Redirect, depending on what endpoint the authentication request is sent to.

    • In the SAML NameID dropdown list, select the SAML NameID your identity provider is expecting.

    • In the Authentication Context dropdown list, select the authentication context used by the identity provider.

    • Select the Exclude Requested Authentication Context checkbox if no authentication context is required for the authentication request.

  4. In the Signing Certificate section, select the Upload icon to upload the signing certificate from its location on your device. The certificate you upload must be in .pem format.

  5. In the Hosted Service Provider section, copy the Entity ID and SAML URL to your identity provider.

    If your identity provider allows you to upload service provider metadata, select Download SP Metadata to download the metadata. Upload it to your identity provider following their process.

  6. Select Continue to save your configurations and continue setting up Agentic Fabric.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.