Coupa Provisioner

Configuring your SP connection for IdP-initiated SSO

About this task

This task is only required if you want to enable identity provider (IdP)-initiated single sign-in (SSO).

To successfully configure your SP connection for IdP-initiated SSO, you must add a RelayState parameter to your SP connection’s Assertion Consumer Service (ACS) URL.

Steps

  1. In the PingFederate admin console, click your Coupa SP connection to edit it.

  2. In the Protocol Settings section, click the Assertion Consumer Service URL link.

  3. Click Edit for the Endpoint URL you are using in your SP connection.

  4. Enter the following Endpoint URL, which contains the RelayState parameter.

    [.userinput]``/sp/ACS.saml2?RelayState=https://[.varname]__YourSubDomain__.coupacloud.com/sessions/saml_post``
    [.varname]__YourSubDomain__ is your Coupa subdomain, which you obtained in the xref:pf_coupa_connector_obtain_required_information.adoc[].
  5. Click Update.

  6. Click Done, Done and Save.