20 Oct 2026, 01:15 UTC · 1 question · ID 0b7653d75eb4
Who asked
Profile
We don’t have a profile for this visitor.
Question 1
“Where do I upload our identity provider's metadata for SSO?”
Answer
Partly answered
The site says you can sign in through your identity provider with enforced two-step login. It never explains how to set up single sign-on: where the settings are, which protocols are supported or where to upload identity provider metadata.
Expand the Single sign-on card on /security with setup basics
Who needs it: IT admins setting up single sign-on
What is missing
Supported sign-on protocols (such as SAML) are not named.
Where in the workspace single sign-on is configured is not stated.
How to upload or enter identity provider metadata is not explained.
Where
Update this section: Extend the "Single sign-on" card beside "Field-level permissions" and "Encryption" with supported protocols and a link to the setup guide.
Related sections
Guides to get you started · Security and control
What to do
Confirm with engineering which protocols and identity providers are supported and where the single sign-on settings sit in the workspace.
Add the supported protocols and the settings location to the card.
Link the card to the single sign-on setup guide on /resources.
Done when: The Single sign-on card on /security names the supported protocols, where single sign-on is configured and links to a setup guide. Depends on: “Add a single sign-on setup guide to /resources”
No guide explains how to connect an identity provider.
Where to upload identity provider metadata is not covered.
How to test and enforce single sign-on for all users is not covered.
Where
Update this section: Add a single sign-on setup item under the "Security and control" card, beside "Permissions down to the field", "A history of every change" and "Encryption for every record".
Related sections
Security and control, built into every hub
What to do
Confirm with engineering and product the steps for connecting an identity provider, including the metadata upload location, testing and enforcement.
Write a short guide covering those steps and link it from the "Security and control" card.
Done when: /resources links to a guide that shows where to upload identity provider metadata and how to enforce single sign-on.
Answer full page
You upload your identity provider's metadata when you connect a SAML 2.0 provider in your workspace's single sign-on settings. The setup guide below walks through each step.