SSO Technical Configuration Reference
Use the parameters below to configure Origin Studio as a Service Provider (SP) within your Identity Provider (IdP).
1. Supported Identity Providers
We support any SAML 2.0 compliant Identity Provider (IdP), including:
Okta
Microsoft Azure AD (Entra ID)
Google Workspace
Other Custom SAML Providers
2. Service Provider (SP) Configuration Details
Your IT team will need the following endpoints to configure the SAML integration:
Reply URL (ACS)
https://[your-subdomain].fabricdata.com/saml2/active_directory/acs
Identifier (Entity ID)
https://[your-subdomain].fabricdata.com/saml2/active_directory/metadata
Audience Restriction
https://[your-subdomain].fabricdata.com
Replace [your-subdomain] with your organization's actual subdomain.
3. Attribute Mapping & Claims
To ensure user profiles are created correctly upon login, configure the following attribute mappings in your IdP:
firstName
user.firstName
User's first name
lastName
user.lastName
User's last name
email
user.email
Required – Used as unique identifier
4. Required Identity Provider Metadata
After configuring the application in your IdP, provide us with either:
Option A: Federation Metadata XML File
Upload the complete metadata XML file from your IdP.
Option B: Individual Configuration Values
SAML Issuer ID – The unique identifier URL from your IdP
Single Sign-On URL – The SAML login endpoint
X.509 Certificate – Public key for validating SAML assertions (Base64 or PEM format)
OAuth2 Authorize URL (if applicable) –
https://[idp-domain]/oauth2/authorize?client_id=[Your_Client_ID]
Need help? Contact our support team at [support email] .
Last updated