🧩

User Guide: Setting Up SAML 2.0

1 Create a SAML App

⚠️

Contact us first. We need to configure a few things on our end first. We will provide you with an identifier connection_id that you will use for your connection setup.

You will need the following info:

SSO URL:

  • Note: replace {connection_id} with the value that we will provide to you. Ex., SafeBase's SSO URL looks like https://auth.safebase.io/login/callback?connection=safebase-saml

Audience URI (SP Entity ID):

urn:auth0:safebase:{connection_id}

If your IdP supports direct metadata import, use this URL:

  • Note: replace {connection_id} with the value that we will provide to you. Ex., SafeBase's SSO URL looks like https://auth.safebase.io/login/callback?connection=safebase-saml

Set Up Mapping

⚠️

Let us know what your Identity Provider is. We'll need to figure out attribute mapping. If you're using an IdP like Okta, it can be straightforward because we know the mapping already. Let us know if you'd like IdP-initiated SSO to be enabled.

Please map the following attributes:

  • First name → firstName
  • Last name → lastName
  • Email → email
  • Identifier/Login → id

Okta

In Okta, your configuration should look like this (with the {connection_id} replaced):

image

2 Provide Us With Your SAML Metadata

  • IdP SSO URL

You can find it by clicking on "View Setup Instructions" if you are using Okta

image
  • X.509 Certificate