Multiple IdPs can be used with a single Canto account.
|
Please note: For IdPs from different providers (for example, Microsoft Entra ID and PingFederate), group assignment works when roles and groups are managed in the IdP for every IdP. Managing them in Canto for one IdP and in the IdP for another is not supported. |
- A logic(al) name for the different IDPs. It can be the IDP type or any other name, like vendor, azure, adfs1, adfs2 etc.
Note: The name cannot contain spaces. - IDP Metadata (xml file) for each IDP.
- A custom button text for each button (see picture below).
-
The order of the SSO login buttons (from top to bottom, see picture below).
The picture above is showing multiple IDP settings displayed in a drop-down menu.
All IDPs are using the same Sp Entity Id, usually it is
- https://XYZ.canto.com or
- https://XYZ.canto.global or
- https://XYZ.canto.de or
- https://XYZ.ca.canto.com
The callback URL should be changed from https://XYZ.canto.com/callback to https://XYZ.canto.com/saml/{logic_name}/callback
Logic_name: was defined in the first step (vendor, azure, adfs1, adfs2 etc.), so the real callback URL might look like: https://XYZ.canto.com/saml/vendor/callback