
kjk3q (kjk3q) asked a question.
Can Single OKTA SAML app be used for multiple regional vpn endpoints for authentication ? Right now I can only see it happening in 1-1 relationship between app and vpn endpoint . We are trying to avoid having single saml app for even vpn endpoint .

Hi @kjk3q (kjk3q) , Thank you for reaching out to the Okta Community!
I think this type of deployment would be more dependent on the SP than Okta, as they would need to accept the login request and direct the users to the proper endpoint.
The only thing I can think of on the Okta side is the "Other Requestable SSO URLs" feature in the custom SAML app settings:
https://support.okta.com/help/s/article/How-to-add-additional-Requestable-SSO-URLs?language=en_US
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Community members help others by clicking Like or Select as Best on responses. Try it today.
@Mihai N. (Okta, Inc.) Hello Mihai ,
Thanks for the reply . Is the Other Requestable SSO URLs option means multiple Gateways can authenticate to it using SAML ? Is there an example of such config I can refer to somewhere ? the Knowledge based shared here doesnt give much info on what all that setting can be used for .
The feature that I mentioned would allow you to add multiple URL that would trigger the authentication to a single app, so theoretically if your VPN can handle those requests, you would not need to set up multiple apps.
But again, I recommend discussing this matter with your Service Provider to clarify if this is supported.