Hi Evans,

Your service provider needs to know about your identity provider and vice versa. In this step, you’re on the Salesforce site providing information about the identity provider, in this case, Axiom. In the next step, you give Axiom information about Salesforce.

On the Salesforce side, we configure SAML settings. SAML is the protocol that Salesforce Identity uses to implement SSO.

Tip : You’re going to work in both your Salesforce Dev org and the Axiom app. Keep them open in separate browser windows so that you can copy and paste between the two.

Click SAML Identity Provider & Tester.

Click Download the Identity Provider Certificate. You upload this certificate later to your Salesforce org, so remember where you save it.

In your Salesforce org, from Setup, enter Single in the Quick Find box, and then select Single Sign-On Settings.

Click Edit.

Select SAML Enabled.

Click Save.

In SAML Single Sign-On Settings:

Click New.

Enter the following values.

Name: Axiom Test App

Identity Provider Certificate: Choose the file you downloaded in step 3.

Request Signature Method: Select RSA-SHA1.

SAML Identity Type: Select Assertion contains the Federation ID from the User object.

SAML Identity Location: Select Identity is in the NameIdentifier element of the Subject statement.

Service Provider Initiated Request Binding: Select HTTP Redirect.

Entity ID: Enter your My Domain name, which you can copy from the subdomain name that you set up in the “Customize Your Login Process with My Domain” unit. Make sure that entity ID includes "https" and references the Salesforce domain.

Thanks in Advance,

Lavanya Sreepada