Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 17 additions & 3 deletions docs/platform-areas/integrations/authentication/saml.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,12 +21,26 @@ Integrate SAML with Quilr for enterprise Single Sign-On (SSO) authentication.

## Required Configuration

- Identity Provider metadata
- SAML assertion consumer service (ACS) URL
- Certificate configuration
- **IdP SSO URL** — the identity provider's Single Sign-On URL. Must be a valid HTTPS URL.
- **IdP SLO URL** — the identity provider's Single Logout URL, if provided. Must be a valid HTTPS
URL.
- **IdP Entity ID** — the identity provider's entity identifier. Must be a valid URL or URN.
- **IdP Signing Certificate** — paste the certificate provided by your identity provider. PEM
headers, footers, and line breaks are stripped automatically, so the certificate can be pasted
as-is.
- **NameID Format** — choose the SAML NameID format your identity provider issues: Email Address,
Unspecified, Persistent, or Transient.
- **Enforce SSO** — when enabled, Microsoft and Google social login attempts are redirected to your
configured SAML identity provider instead of completing sign-in directly.

The setup form validates these fields as you type. Fields with invalid values show an inline error,
and the **Allow** button stays disabled with an explanatory message until all SAML configuration
errors are resolved.

## What This Integration Does

- Enables SSO authentication for Quilr.
- Integrates with enterprise identity providers.
- Validates SAML configuration values before the integration can be enabled.
- Optionally enforces SSO so social login is redirected to your identity provider.
- Provides secure authentication workflows.
16 changes: 16 additions & 0 deletions docs/release-notes/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,22 @@ hide_copy_dropdown: true

# Release Notes

## July 2, 2026

### Improved

- [Integrations](/platform-areas/integrations/authentication/saml): Added field-level validation
to the **SAML** setup form. The IdP SSO URL and IdP SLO URL must be valid HTTPS URLs, the IdP
Entity ID must be a valid URL or URN, and the IdP Signing Certificate is checked for a valid
certificate format — PEM headers and line breaks are stripped automatically so admins can paste
certificates as-is. The **Allow** button is disabled with an explanatory message until any SAML
configuration errors are fixed, preventing incomplete or malformed SSO setups from being saved.

- [Integrations](/platform-areas/integrations/authentication/saml): The SAML **NameID Format**
field now shows friendly labels (Email Address, Unspecified, Persistent, Transient) instead of
raw URN values, and added a description clarifying that enabling **Enforce SSO** redirects
Microsoft and Google social login attempts to the configured SAML identity provider.

## June 26, 2026

### New
Expand Down