Update to SAML Validation
- SAML
- SAML 2.0
In version 2.196.58 and above, additional validation has been added to the SAML integration to only allow login requests that have been sent to the assertion endpoint configured in the SAML integration in Halo. This additional validation will be effective from 01/08/2025.
If the assertion endpoint configured in your IdP does not match the endpoint configured in your Halo instance, users will receive an Invalid endpoint error when trying to sign in to the application.
To avoid any disruption, we recommend confirming that the endpoint configured in your IdP matches the chosen value of the assertion endpoint field in Halo. If they are different, you will either need to change the assertion endpoint in your IdP or change the value of the Halo field.
