Changing issuer in Auth0 SAML enterprise connection

[dsteblyuk]

Hi @thameera, it worked, thank you so much!

my bad - the option when Auth0 is the SAML SP is actually called entityId , not issuer

It was my bad actually - this was in the docs and I missed it:
https://auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers/saml#specify-a-custom-entity-id

However, changing entityId was not enough, as Auth0 also does verification of destination and recipient (both must be specified in SAML service provider). By default the recipient and destination are equal to https://TENANT_DOMAIN/login/callback?connection=CONNECTION_NAME in Auth0. Our customers have different values already specified in their IDPs. This causes access_denied Recipient is invalid and Destination is invalid errors. Is it possible to override these values in Auth0?

P.S. I found an open topic about the same issue but it’s unanswered:

Can I skip Destination URL check as SAML Service Provider?

Hello, I’m trying to replace my own authentication system to Auth0. My system has SAML as Service Provider feature and some users did setting their IdP to connect my Service Provider. Generally I have to ask them to update IdP setting to request to Auth0 but I want to let them use Auth0 instead of us without changing their IdP. I tried to receive SAML Response in my ACS and then call Auth0 ACS to passthrough SAML Response and RelayState however Auth0 returns error Destination endpoint did not …