<commit_before># Auth0 as ServiceProvider 

These instructions explain how to configure Auth0 to serve as a Service Provider in a SAML federation.


There are **5 sections**, including a troubleshooting section at the end.

1. Obtain information from IDP
2. Configure Auth0 as Service Provider
3. Add your Service Provider metadata to the Identity Provider
4. Test the connection from Service Provider to Identity Provider
5. Troubleshooting


##1. Obtain information from IDP 

You will need to obtain some information from the Identity Provider.  The instructions here will be generic.  You will have to locate this information in your specific Identity Provider.

* SSO URL - The URL at the Identity Provider to which SAML authentication requests should be sent.  This is often called an SSO URL.

* Logout URL - The URL at the Identity Provider to which SAML logout requests should be sent.  This is often called a logout URL, a global logout URL or single logout URL.

* Signing certificate - The Identity Provider will digitally sign authentication assertions and the signing certificate is needed by the Service Provider to validate the signature of the signed assertions.  There should be a place to download the signing certificate from the Identity Provider.   If the certificate is not in .pem or .cer format, you should convert it to one of those formats.


##2. Configure Auth0 as Service Provider 

In this section you will configure Auth0 to serve as a SAML Service Provider.


**In the Auth0 dashboard:**

1. Click on **"Connections"** link at left.
2. In the list of options below "Connections", click on **"Enterprise"**
3. In the middle of the screen, click on **"SAMLP Identity Provider"**
4. Click on the blue **"Create New Connection"** button


In the **"Create SAMLP Identity Provider"** connection window, enter the following information into the "Configuration" tab.

**Connection Name:** You can enter any name, such as "SAML-SP"

**Email Domains:** In this example, we will use the Lock Widget, so in the Email Domains field enter the email domain name for the users that will log in via this connection.
For example, if your users have an email domain of 'abc-example.com', you would enter that into this field. You can enter multiple email domains if needed.  Make sure the test user you created in section 2 has an email address with email domain that matches what you enter here.
If you leave this field blank, users with any email domain can use the IDP.

**Sign In URL:** enter the **"SAML SSO URL"** that you obtained from the Identity Provider.

**Sign Out URL:** enter the **SAML Logout URL** obtained from the Identity Provider.<commit_msg>Fix explanation for what to enter in Email domain field<commit_after># Auth0 as ServiceProvider 

These instructions explain how to configure Auth0 to serve as a Service Provider in a SAML federation.


There are **5 sections**, including a troubleshooting section at the end.

1. Obtain information from IDP
2. Configure Auth0 as Service Provider
3. Add your Service Provider metadata to the Identity Provider
4. Test the connection from Service Provider to Identity Provider
5. Troubleshooting


##1. Obtain information from IDP 

You will need to obtain some information from the Identity Provider.  The instructions here will be generic.  You will have to locate this information in your specific Identity Provider.

* SSO URL - The URL at the Identity Provider to which SAML authentication requests should be sent.  This is often called an SSO URL.

* Logout URL - The URL at the Identity Provider to which SAML logout requests should be sent.  This is often called a logout URL, a global logout URL or single logout URL.

* Signing certificate - The Identity Provider will digitally sign authentication assertions and the signing certificate is needed by the Service Provider to validate the signature of the signed assertions.  There should be a place to download the signing certificate from the Identity Provider.   If the certificate is not in .pem or .cer format, you should convert it to one of those formats.


##2. Configure Auth0 as Service Provider 

In this section you will configure Auth0 to serve as a SAML Service Provider.


**In the Auth0 dashboard:**

1. Click on **"Connections"** link at left.
2. In the list of options below "Connections", click on **"Enterprise"**
3. In the middle of the screen, click on **"SAMLP Identity Provider"**
4. Click on the blue **"Create New Connection"** button


In the **"Create SAMLP Identity Provider"** connection window, enter the following information into the "Configuration" tab.

**Connection Name:** You can enter any name, such as "SAML-SP"

**Email Domains:** Enter the email domain name for the users that will log in via this connection.
For example, if your users have an email domain of 'abc-example.com', you would enter that into this field. You can enter multiple email domains if needed.  If you leave this field blank, users with any email domain can use the IDP.

**Sign In URL:** enter the **"SAML SSO URL"** that you obtained from the Identity Provider.

**Sign Out URL:** enter the **SAML Logout URL** obtained from the Identity Provider.
{'fraction_non_alphanumeric': 0.053653846153846156, 'fraction_numerical': 0.007115384615384615, 'mean_word_length': 4.290946083418108, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 2, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7513799', 'n_tokens_mistral': 1309, 'n_tokens_neox': 1240, 'n_words': 824}