...

1. Go to Admin >  SAML page. Note that this link is to the SaaS solution and on-premises deployments should use their base URL (<Base URL>Wss/WSS.html#!samlIntegration)

2. Fill in the SAML integration fields:

   • SAML Entity ID: Enter your organization's unique SAML ID (it can be found in your IDP’s SAML metadata, usually as an entityID tag.).

   • Use one of the following options to add your organization’s metadata:

     • Metadata Link: Enter the URL of your organization's metadata.

     • Metadata Text: Enter your organization's metadata in plain text.

     • Metadata File: Upload an XML file that includes the organization’s metadata. (See the example here)

...

When mapping roles in the SAML Global Account method, each group is mapped to a specific Mend organization (domain). For example, in the following Edit Groups window there are two ‘users’ groups from the ‘Organization1’ and ‘Organization2’ domains. The admin should select the group assigned to the relevant domain, which should be mapped for the role that is being added.

...

Removing Users from your IdP

When removing a user from your organization’s IdP, you will also need to remove them from the Mend UI in order to fully deactivate their API access. To remove a user from the Mend UI, please follow the steps provided in the following articles:

• UI - How to Remove a User or Reassign a Policy

• Managing Users

Appendix: Chrome SAML Extension

...