The URL configured for the ACS must exactly match what is sent. If you have odoo responding on multiple URLs you can use this to force it to send a specific address rather than rely on automatically detecting.
Your ACS url will be base_url + /auth_saml/signin
Available after first save. The URL will change if the provider is deleted & recreated or the database is renamed.
Entity Identifier sent to the IDP. Often this would be the metadata URL, but it can be any string.
Used to sign requests sent to the IDP. You can use openssl to generate a certificate and key.
Used to sign requests sent to the IDP. You can use openssl to generate a certificate and key.
Algorithm used to sign requests.
Mapped attributes are copied from the SAML response at every logon, if available. If multiple values are returned (i.e. a list) then the first value is used.