--- schema_version: "1" id: 9b633ad45b500385384dd56f835727252ddfed24fee50594cb3f04391fc06556 title: Update Your SAML SSO IdP Configuration After a Login or Site URL Change collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/domain_name_auth_update_idp_saml.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.domain_name_auth_update_idp_saml.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 01e818aca1384a65436c0155fac3a85221ac2f93d0ba5b24c3ff12999f12ded3 description: After you deploy a My Domain change that updates your My Domain login URL or site URL, SAML Single Sign-On (SSO) authentication stops working. To allow your users to use this SSO method again, work with your Identity Provider to update your configuration. products: - Salesforce Platform - Cross Cloud release: "264" --- # Update Your SAML SSO IdP Configuration After a Login or Site URL Change After you deploy a My Domain change that updates your My Domain login URL or site URL, SAML Single Sign-On (SSO) authentication stops working. To allow your users to use this SSO method again, work with your Identity Provider to update your configuration. ### Required Editions
Available in: both Salesforce Classic and Lightning Experience
Available in: Group, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer Editions
![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_important.png) Important Before you deploy a change that updates your login URL or you update your authentication settings, make sure that you can access Salesforce after the change. Double-check that at least one admin can log in without authentication features such as SSO, built-in authenticators, or security keys. For more information, see [Preserve Login Access During a My Domain Login URL Change](https://help.salesforce.com/s/articleView?id=xcloud.domain_name_login_change_preserve_access.htm&release=264.0.0&type=5 "When your My Domain or site login URL changes, two multi-factor authentication (MFA) verification methods stop working: built-in authenticators and security keys. Without those methods, single sign-on (SSO) can also stop working. To preserve admin access to Salesforce and prevent end-user frustration, verify your backup authentication methods. In preparation for your My Domain change, determine the post-deployment steps to reestablish authentication for your org, including resetting the affected verification methods for your users."). After you deploy the change that updates your My Domain login URL, work with your Identity Provider (IdP) to update your IdP configuration with the new authentication values. These steps also apply after your Experience Cloud site URL or Salesforce Site URL changes, but only if you use the system-managed site URL to authenticate. System-managed site URLs end in \*.my.site.com for Experience Cloud sites and \*.my.salesforce-sites.com for Salesforce Sites. If you authenticate via a custom domain, such as https://www.example.com, that serves your Experience Cloud site or Salesforce Site, then your SSO configuration is unaffected. 1. In the Quick Find box, enter Single Sign-On, and then select **Single Sign-On Settings**. 2. View the details for each entry in the SAML Single Sign-On Settings table. The updated values are shown in the Endpoints section. ![The SAML Single Sign-On Settings page with the Endpoints section circled.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/setup/images/my_domain_saml_sso_settings.png) 3. Share the values in these fields with your Identity Provider. - Assertion Consumer Service (ACS) URL - Logout URL - OAuth 2.0 Token Endpoint - Entity ID ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_note.png) Note Some Identity Provider configurations don’t use every field. 4. After your Identity Provider updates the settings, verify your updated endpoints with the /.well-known/auth-configuration URL path. For example, if your login URL is https://mycompany.my.salesforce.com, visit https://mycompany.my.salesforce.com/.well-known/auth-configuration. 5. If your configuration includes SAML Single Sign-On (SSO) that is initiated by the service provider, update your authentication configuration settings on the My Domain page. 1. From Setup, in the Quick Find box, enter My Domain, and then select **My Domain**. 2. In the Authentication Configuration section, click **Edit**. 3. In the **Authentication Service** field, select the correct record and save your changes. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-setup-264-0-0-production-enus/6f21df35-9ea0-4f53-ac94-45c3b5dfd5bc/images/icon_note.png) Note If you don’t know whether the service provider initiates SAML SSO, before you deploy your My Domain change, view the authentication configuration settings on the My Domain page. 6. Verify the authentication method from your login page. If necessary, add authentication providers to your login page again. 1. For your org's My Domain login page, see [Add an Authentication Provider to Your Org’s Login Page](https://help.salesforce.com/s/articleView?id=xcloud.sso_provider_org_login_page.htm&type=5&language=en_US) in Salesforce Help. 2. For you Experience Cloud site's login page: [Add an Authentication Provider to Your Experience Cloud Site’s Login Page](https://help.salesforce.com/s/articleView?id=xcloud.sso_provider_customer_add_login_option.htm&type=5&language=en_US) in Salesforce Help. #### See Also - [Update Authentication After a My Domain Change](https://help.salesforce.com/s/articleView?id=xcloud.domain_name_auth_update.htm&release=264.0.0&type=5 "Determine whether your My Domain change requires that you update your authentication settings. Then learn about the authentication settings that can be impacted after a My Domain change and make the required updates. If your My Domain login host name or sites host name changed when you deployed a My Domain change, update your authentication settings.") - [SAML SSO with Salesforce as the Service Provider](https://help.salesforce.com/s/articleView?id=xcloud.sso_saml_setting_up.htm&type=5&language=en_US) - [Configure Your Experience Cloud Site as a Service Provider or Relying Party](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_sso_sp.htm&type=5&language=en_US)