> For the complete documentation index, see [llms.txt](https://knowledgebase.fabricdata.com/studio/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://knowledgebase.fabricdata.com/studio/admin-and-configuration/single-sign-on-sso/sso-technical-configuration-reference.md).

# SSO Technical Configuration Reference

### 1. Supported Identity Providers

We support any SAML 2.0 compliant Identity Provider (IdP), including:

* **Okta**
* **Microsoft Azure AD (Entra ID)**
* **Google Workspace**
* **Other Custom SAML Providers**

***

### 2. Service Provider (SP) Configuration Details

Your IT team will need the following endpoints to configure the SAML integration:

| Field                      | Value                                                                     |
| -------------------------- | ------------------------------------------------------------------------- |
| **Reply URL (ACS)**        | `https://[your-subdomain].fabricdata.com/saml2/active_directory/acs`      |
| **Identifier (Entity ID)** | `https://[your-subdomain].fabricdata.com/saml2/active_directory/metadata` |
| **Audience Restriction**   | `https://[your-subdomain].fabricdata.com`                                 |

*Replace `[your-subdomain]` with your organization's actual subdomain.*

***

### 3. Attribute Mapping & Claims

To ensure user profiles are created correctly upon login, configure the following attribute mappings in your IdP:

| Claim Name  | IdP Attribute    | Notes                                    |
| ----------- | ---------------- | ---------------------------------------- |
| `firstName` | `user.firstName` | User's first name                        |
| `lastName`  | `user.lastName`  | User's last name                         |
| `email`     | `user.email`     | **Required** – Used as unique identifier |

***

### 4. Required Identity Provider Metadata

After configuring the application in your IdP, provide us with **either**:

#### Option A: Federation Metadata XML File

Upload the complete metadata XML file from your IdP.

#### Option B: Individual Configuration Values

* **SAML Issuer ID** – The unique identifier URL from your IdP
* **Single Sign-On URL** – The SAML login endpoint
* **X.509 Certificate** – Public key for validating SAML assertions (Base64 or PEM format)
* **OAuth2 Authorize URL** *(if applicable)* – `https://[idp-domain]/oauth2/authorize?client_id=[Your_Client_ID]`

***

**Need help?** Contact our support team at \[support email] .