Merge pull request #248843 from Harshita-130901/Tanium-SSO-Update

Product Backlog Item 2669263: SaaS App Tutorial: Tanium SSO Update

Author: prmerger-automator[bot]

articles/active-directory/saas-apps/cloudbees-ci-tutorial.md

@@ -71,9 +71,7 @@ Complete the following steps to enable Azure AD single sign-on in the Azure port
     | `https://cjoc.<CustomerDomain>/securityRealm/finishLogin` |
     | `https://<Environment>.<CustomerDomain>/securityRealm/finishLogin` |
 
-1. Perform the following step, if you wish to configure the application in **SP** initiated mode:
-
-	In the **Sign on URL** textbox, type the URL using one of the following patterns:
+	c. In the **Sign on URL** textbox, type the URL using one of the following patterns:
 
 	| **Sign on URL** |
     |------------|

articles/active-directory/saas-apps/tanium-sso-tutorial.md

@@ -73,7 +73,10 @@ Complete the following steps to enable Azure AD single sign-on in the Azure port
     > [!NOTE]
     > These values are not real. Update these values with the actual Identifier, Reply URL and Sign on URL. Contact [Tanium SSO support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
 
-1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
+    > [!NOTE]
+    > If deploying Tanium in an on-premises configuration, your values may look different than those shown above. The values to use can be retrieved from the **Administration > SAML Configuration** menu in the Tanium console. Details can be found in the [Tanium Console User Guide: Integrating with a SAML IdP](https://docs.tanium.com/platform_user/platform_user/console_using_saml.html?cloud=false "Integrating with a SAML IdP Guide").
+
+1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer. If deploying to Tanium in an on-premises configuration, click the edit button and set the **Response Signing Option** to "Sign response and assertion".
 
 	[ ![Screenshot shows the Certificate download link.](common/copy-metadataurl.png "Certificate") ](common/copy-metadataurl.png#lightbox)