1. Docs
  2. Administration
  3. Access & Identity
  4. SAML(SSO)
  5. Auth0

SAML: Configuring Auth0

    This guide walks you through configuring your Auth0 Authentication Platform as a SAML SSO identity provider (IDP) for Pulumi Cloud.

    Enabling SAML for your Auth0 authentication platform

    To enable SAML for your Auth0 Authentication Platform, navigate to the Applications section of your Auth0 dashboard. You may need to create a new application or select an existing application. Next, we need to get the SAML metadata XML to configure Pulumi. For this, navigate to the Settings tab of your application and scroll down to the Advanced Settings section.

    Auth0 Application Settings

    Expand the Advanced Settings section and click on the Endpoints tab. In the Endpoints tab, scroll down to the SAML section. Copy the SAML Metadata URL link and download the metadata XML file via the browser or a command line tool like curl.

    Auth0 Application Endpoints

    Finally, in the Settings tab of your application, navigate to the Application URIs section. In the Application Login URI field, enter the URL of your Pulumi organization in the following format:

    https://api.pulumi.com/login/{orgName}/sso/saml/acs

    where {orgName} is the name of your Pulumi organization. Additionally, in the Allowed Callback URLs field, enter the same URL.

    Configuring your Pulumi organization

    To configure Pulumi with the SAML metadata:

    1. Sign in to Pulumi Cloud and navigate to your organization.
    2. Select Settings > Access Management.
    3. Select the Other tab.
    4. In the Membership Requirements section, select Change requirements.
    5. Select SAML SSO and then Next.
    6. Paste the contents of the downloaded XML file into the text area.
    7. Select Apply changes.

    Troubleshooting

    Auth0 troubleshooting: SAML app error messages

    For additional help, see the SAML SSO troubleshooting guide or contact support.