Skip to main content
This guide explains the settings you need to configure SAML on your Identity Provider so that it works with Ory Polis. Once set up, your IdP returns an XML metadata file that you then register with Ory Polis using the Polis API or addConnection controller method.
Do not add a trailing slash at the end of any of the URLs below.

​
Service Provider settings

Create the following entries in your IdP exactly as shown:
The deployed Ory Polis service exposes the Service Provider (SP) metadata for the values above at /.well-known/saml-configuration.

​
SAML profile, claims, and attribute mapping

Ory Polis supports four attributes in the incoming SAML claims: id, email, firstName, and lastName. The table below shows how the standard SAML attribute URIs map to these fields for most Identity Providers. Some providers use custom names — refer to that provider’s documentation for the exact mapping.

​
Next steps

After you complete the IdP-side configuration:
  1. Download the IdP metadata XML from your Identity Provider.
  2. Create a new SAML connection in Ory Polis using that metadata.
  3. Point TrueFoundry SSO at your Ory Polis deployment as described in the SSO Overview.