Skip to content

docs: add note about refined Okta SAML SSO URL format #6029

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dvdaruri-art wants to merge 1 commit into
base: main
Choose a base branch
from
+32 −0
Open

docs: add note about refined Okta SAML SSO URL format #6029

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions fern/products/dashboard/pages/sso.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,22 @@ SSO setup requires working with Fern to exchange configuration values (like call

<Step title="Send Fern your IdP metadata">
From the **Sign-On** tab, copy the Metadata URL and X.509 certificate. Send them back to Fern. Fern will enable the connection and run a test login with you.

<Note title="SSO URL format">
Okta may provide a Metadata URL in the form:

```
https://<your-tenant>.okta.com/app/<app-id>/sso/saml/metadata
```

In recent configurations, the SSO URL used by Fern follows a refined format that inserts `/{email_domain}_fern_1/` between `/app` and the app ID, and drops `/metadata` from the end:

```
https://<your-tenant>.okta.com/app/{email_domain}_fern_1/<app-id>/sso/saml
```

If you run into issues, try the original Metadata URL format for troubleshooting.
</Note>
</Step>

<Step title="Disable IdP-initiated login">
Expand Down
16 changes: 16 additions & 0 deletions fern/translations/zh/products/dashboard/pages/sso.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,22 @@ SSO 设置需要与 Fern 合作交换配置值（如回调 URL 和实体 ID）

<Step title="向 Fern 发送您的身份提供商元数据">
从 **Sign-On** 选项卡中，复制元数据 URL 和 X.509 证书。将它们发送回 Fern。Fern 将启用连接并与您一起运行测试登录。

<Note title="SSO URL 格式">
Okta 可能会提供以下格式的元数据 URL：

```
https://<your-tenant>.okta.com/app/<app-id>/sso/saml/metadata
```

在最近的配置中，Fern 使用的 SSO URL 采用改进格式，在 `/app` 和应用 ID 之间插入 `/{email_domain}_fern_1/`，并删除末尾的 `/metadata`：

```
https://<your-tenant>.okta.com/app/{email_domain}_fern_1/<app-id>/sso/saml
```

如果遇到问题，请尝试使用原始元数据 URL 格式进行故障排除。
</Note>
</Step>

<Step title="禁用身份提供商发起的登录">
Expand Down
Loading