Configuring the SAML Application

After enabling the SAML Identity Provider service, use this section to configure each cloud application (for example, Salesforce) to trust SMA as its identity provider. This configuration differs from integrating SMA with an external identity provider such as Microsoft Entra ID. In this scenario, the cloud application is configured to delegate user authentication to SMA. When users initiate Single Sign-On (SSO) from the application, they are redirected to SMA for authentication. Upon successful authentication, SMA returns the user to the application and establishes an authenticated session.

To configure an external web application to use SMA as its SAML Identity Provider, use the following information:

• SAML Single Sign-On (SSO) Endpoint: Configure the application to send SAML authentication requests to: https://idp.company.com/samlserver/sso/spinit, where idp.company.com is the fully qualified domain name (FQDN) of your Workplace site.

• Signing Certificate: On the SAML IdP Settings page, click Download to obtain the certificate used by SMA to sign SAML assertions. Import this certificate into the application so that it can validate assertions issued by SMA.

Alternatively, after completing the SAML IdP configuration, you can export the IdP metadata file and import it directly into the application, if the application supports metadata-based configuration. This approach automatically populates the required IdP settings and helps reduce manual configuration errors.