SAML Metadata and Custom Domains

When configuring a SAML2 Web App Addon within Applications in the Auth0 Dashboard, it is possible to download the Identity Provider Metadata as per the screenshot below:

If a custom domain is configured on the tenant, the URLs in the downloaded XML file refer to the tenant's canonical domain, not the custom domain.

• Security Assertion Markup Language (SAML)
• Application Addons

Currently, the Identity Provider Metadata XML file can only be downloaded using the canonical domain. There is a product backlog item to improve this going forward, but we cannot provide a specific delivery date at this time. Our product team regularly reviews the backlog to prioritize items for future development based on customer feedback and our overall product strategy.

The workaround for the time being is to copy the link address from the download link and manually amend the canonical domain in the link to represent the custom domain instead. For example:

• The link might be something like:
  • https://CONONICAL-DOMAIN/samlp/metadata/CLIENT_ID
• Amend the link to be:
  • https://CUSTOM-DOMAIN/samlp/metadata/CLIENT_ID

Once the custom domain-linked file is downloaded, all the URLs in the file will represent the custom domain.

In addition, it is recommended to log product feedback on this so that the product teams can gauge demand for this feature.