Can I change the Destination check login on the incoming SAML assertion?

Get Help
,
1

Similar to this question:

I want to migrate customers to Auth0 without asking customers to make changes to the existing configuration in their IDP.

To achieve that I need to change the entityId (which I was already able to do in Auth0) and change the check that is done in the Destination field in the SAML incoming assertion.

This is to avoid this issue:

Destination endpoint https://xyz/sp/ACS.saml2 did not match https://abc.us.auth0.com/login/callback?connection=okta-test-me

The question is, can I change the expected Destination endpoint?

Thanks.

2

We have the exact use case and face with the same problem. Were you able to figure out a migration strategy where Auth0 does not fail on Destination? e.g. whitelisting ACS url on Auth0 side?

3

We discovered that destinationUrl and recepientUrl can be updated via SDK/API which looks promising with our initial tests.