diff --git a/self-hosting/govern/saml-sso.mdx b/self-hosting/govern/saml-sso.mdx index 227e54dc..939dd65b 100644 --- a/self-hosting/govern/saml-sso.mdx +++ b/self-hosting/govern/saml-sso.mdx @@ -20,9 +20,9 @@ Create a Plane client or application per your IdP's documentation and configure | **Config** | **Value** | |---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------| -| Entity ID

Metadata that identifies Plane as an authorized service on your IdP | `http(s)://domain.tld/auth/oidc/` | -| ACS URL

Assertion Consumer service that your IdP will redirect to after successful authentication by a user

This is roughly the counterpart of the `Callback URL` in OIDC set-ups. | `http(s)://domain.tld/auth/oidc/callback/`

Plane supports HTTP-POST bindings. | -| SLS URL

Single Logout Service that your IdP will recognize to end a Plane session when a user logs out

This is roughly the counterpart of the `Logout URL` in OIDC set-ups. | `http(s)://domain.tld/auth/oidc/logout/` | +| Entity ID

Metadata that identifies Plane as an authorized service on your IdP | `http(s)://domain.tld/auth/saml/` | +| ACS URL

Assertion Consumer service that your IdP will redirect to after successful authentication by a user

This is roughly the counterpart of the `Callback URL` in SAML set-ups. | `http(s)://domain.tld/auth/saml/callback/`

Plane supports HTTP-POST bindings. | +| SLS URL

Single Logout Service that your IdP will recognize to end a Plane session when a user logs out

This is roughly the counterpart of the `Logout URL` in SAML set-ups. | `http(s)://domain.tld/auth/saml/logout/` | When setting these values up on the IdP, it’s important to remember Plane does not need to provide a signing certificate like other service providers.