SAML - Auth0 Self-Service

Overview

SAML authentication using Auth0's self-service feature. For background information and concepts, see SAML Auth0 Self-Service Overview.

All SAML connections must provide a federated_id claim. See ADR-004: Require federated_id Claim for the rationale.

Testing

We maintain an Auth0 tenant 'internal-testing-idp-statista' that is connected to our test environments and acts as external IdP.

We have a set of test users for that IdP that allow us to test the Auth0 SAML solution.

Local

On your local machine you can use the following account:

Item	Test data
SAML Url	https://www.statista.test/sso/login?connection=statista-internal-academia-local-auth0
User	internal-testing-idp-statista-saml-1@statista.com
Password	internal-testing-idp-statista-saml-1@statista.com

Additional data related to this test account:

Application name in Auth0: Internal Testing SAML (Statista local/dev/test)

Stage

For our stage environment you can use the following account:

Item	Test data
SAML Url	https://stage.statista.com/sso/login?connection=statista-internal-academia-stage-auth0
User	internal-testing-idp-statista-saml-1@statista.com
Password	internal-testing-idp-statista-saml-1@statista.com

Additional data related to this test account:

Application name in Auth0: Internal Testing SAML (Statista stage)

Production

Credentials for a production Auth0 SAML login are stored in the CPE_Internal collection in Bitwarden as "Statista.com - Auth0 SAML - Auth0 (Self-Service)".

Please contact the UAS team if you need to test Auth0 SAML in production.

Additional data related to this test account:

SSO / Login URL