@@ -102,15 +102,18 @@ Make sure you test the connection before enabling in production for your users.
102
102
1 . Open the SAML connection in Kinde. Via ** Organization > Authentication** or via ** Settings > Authentication** .
103
103
2 . Paste in the data you got from the SAML app:
104
104
- IdP metadata URL
105
- - Email key attribute (Principal name)
106
- - First name attribute (Given name)
107
- - Last name attribute (Surname)
108
- 3 . Open the ** Federation Metadata XML** file in a text editor and copy the contents of the file.
109
- 4 . Paste them into the ** Signing certificate** field in the Kinde connection.
110
- 2 . Switch on the connection. This will make it instantly available to users if this is your production environment.
105
+ 3 . Update the attributes
106
+ - Email key attribute (Principal name), such as ` http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name `
107
+ - First name attribute (Given name), such as ` http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname `
108
+ - Last name attribute (Surname), such as ` http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname `
109
+ 4 . (Optional) if you want to sign the SAML httpRequest:
110
+ 1 . Open the ** Federation Metadata XML** file in a text editor.
111
+ 2 . Copy the certificate and private contents of the file to the Sign SAML request section.
112
+ 5 . Paste them into the ** Signing certificate** field in the Kinde connection.
113
+ 6 . Switch on the connection. This will make it instantly available to users if this is your production environment.
111
114
1 . For environment-level connections, scroll down and select the apps that will use the auth method.
112
115
2 . For organization-level connections, scroll down and select if you want to switch this on for the org.
113
- 3 . Select ** Save** .
116
+ 7 . Select ** Save** .
114
117
115
118
## Step 5: Test the connection
116
119
0 commit comments