Umbrella SSO EntityID

nickp214 — Tue, 24 Sep 2024 14:01:35 GMT

Hello,

I am configuring SAML SSO in Umbrella portal.

In the portal the metadata to add to my IDP uses EntityID "https://login.umbrella.com/sso"

This works correctly when I test my SSO configuration.

But when I update my IDP to use the Umbrella metadata URL https://api.umbrella.com/admin/v2/samlsp/certificates/Cisco_Umbrella_SP_Metadata.xml the EntityID in that metadata is "saml.gateway.id.swg.umbrella.com" and SSO breaks after an update.

Running a SAML trace I can see in the samlp AuthRequest that the AssertionConsumerServiceURL is "https://login.umbrella.com/sso" which does not match the EntityID in the metadata URL.

Has anyone gotten SSO to work correctly when using the Umbrella Fixed Metadata URL?

https://docs.umbrella.com/umbrella-user-guide/docs/saml-certificate-renewal-options

Re: Umbrella SSO EntityID

Ken Stieers — Tue, 24 Sep 2024 14:36:40 GMT

SSO for users? Or just the management?

Re: Umbrella SSO EntityID

nickp214 — Tue, 24 Sep 2024 14:37:56 GMT

Just Management

topic Umbrella SSO EntityID in Cloud Security

Umbrella SSO EntityID

Re: Umbrella SSO EntityID

Re: Umbrella SSO EntityID