<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008G7V2xSAFOkta Classic EngineOkta Integration NetworkAnswered2024-04-18T09:03:13.000Z2016-08-30T01:45:27.000Z2020-07-17T13:18:30.000Z
Does Okta support AssertionConsumerServiceURL as the destination for posting SAML assertion?
I'm populating a custom AssertionConsumerServiceURL in the AuthnRequest sent to Okta, but the SAML assertion is being sent to the static ACS URL configured in Okta.

 

I tried both signed and unsigned requests, but in both cases the request is not going to my custom destination. 

 

Is this supported?

pkfqj likes this.
  • ScottD.09849 (Customer)

    I am encountering the same problem. The UI seems to allow multiple URLs and indices in "Requestable SSO URLs", which presumably correspond to AssertionConsumerServiceIndex and AssertionConsumerServiceURL, but the URL POSTed to is always the "Single sign on URL". I'm not sure why those are in the UI, since they seem to do nothing. Maybe a bug. I am trying to use multiple URLs so I don't need to make an app for every single SP I have.
    Expand Post
  • owbhk (owbhk)

    OTKA: What's the latest on this?
  • ScottD.09849 (Customer)

    FYI: I got this working by making sure my AuthnRequest was properly set up. I'm still not sure what the issue was, but it might have been that I needed to set the protocol binding to POST in my AuthnRequest. This works for me for both AssertionConsumerServiceIndex and AssertionConsumerServiceURL.
    • oza1p (oza1p)

      Hi Scott Denny,

       

      How to request the ACS index or ACS URL in the app embedded link?

      Please provide one one example request with ACS Index/ACS URL.

This question is closed.
Loading
Does Okta support AssertionConsumerServiceURL as the destination for posting SAML assertion?