Skip to content

Commit 8613de2

Browse files
committed
docs:clarify Google Workspace RelayState behavior for IdP-initiated SSO
1 parent 203000b commit 8613de2

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

src/content/docs/authenticate/enterprise-connections/idp-initiated-saml-sso.mdx

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -136,6 +136,9 @@ In your IdP admin console, create a new SAML application with these settings:
136136
2. **Entity ID / Audience**: Use the Entity ID you configured in Kinde
137137
3. **Name ID format**: Select the format for the Name ID used to identify users in SAML responses (*Persistent* recommended)
138138
4. **RelayState** (optional): Configure a default RelayState URL if your IdP supports it. This is where users are redirected after authentication.
139+
<Aside>
140+
If you are using Google Workspace as your Identity Provider, note that Google does not support dynamic RelayState for IdP-initiated SSO. Use the Start URL field in the Google SAML application settings to define the post-login redirect URL. The Start URL acts as the RelayState.
141+
</Aside>
139142
5. **Enable IdP-initiated SSO**: In your IdP's application settings, enable the option to allow IdP-initiated sign-on (the exact setting name varies by provider)
140143

141144
<Aside>

0 commit comments

Comments
 (0)