Summary
The SSO page in the Management module is where you view and edit your organisation's SAML Single Sign-On configuration. Once a configuration exists, the page shows an edit form for your provider (Azure, Okta, or generic) where you can update the domain and SAML details, copy the service provider values needed by your identity provider, and activate or deactivate SSO.
Note: This article overlaps with the migrated "Setting up SSO" article and with How to create a new SSO configuration. To create a configuration when none exists, see that article; this article covers editing and managing an existing one.
Prerequisites
Login credentials for MirrorWeb Insight
Admin access to the organisation
An existing SAML configuration for the organisation (see How to create a new SSO configuration)
Configuration details from your identity provider
Step-by-Step Instructions
Step 1: Open the SSO page
In the Management sidebar, click SSO. The page heading reads Configure SSO with the description "Edit and create SSO configurations for [your organisation]". When a configuration exists, it shows an "Edit [provider] SSO config" panel.
Step 2: Review the service provider values
The form displays the values your identity provider needs, each with a Copy button:
Domain — your organisation's domain name.
Reply URL (Assertion Consumer Service URL) — the URL to which the identity provider sends the authentication token, constructed from the domain.
The service provider identifier — labelled Identifier (Entity ID) for the generic provider, Audience for Azure, or Audience URI (SP Entity ID) for Okta.
Step 3: Update the SAML configuration fields
Edit the fields using details from your identity provider. Depending on the provider, these include the Single sign-on URL (or Login URL), Issuer, and a Metadata Type of HTTP (with a Metadata URL) or Stored XML (with Metadata XML). The generic provider also exposes Public Certificate, Certificate, Key, Entity ID, and SSO Service Location.
Step 4: Save your changes
Click Update to save. The button is only enabled once you have made a change. A success toast ("SSO config updated") confirms the update; if there is a problem with the configuration, an error toast appears with a link to contact support at support@mirrorweb.com.
Step 5: Activate or deactivate SSO
Use the Activate / Deactivate button to toggle SSO for the organisation. A "Toggle SSO config" confirmation asks whether you want to activate or deactivate SSO before applying. To remove the configuration entirely, use the Delete button, which opens a "Delete SSO config" confirmation noting the action cannot be undone.
Notes
Each organisation supports a single SAML configuration.
The Reply URL is built from the domain field, so it changes as you edit the domain.
The Update button stays disabled until you change a value on the form.
Deleting an SSO configuration cannot be undone.