Generic SAML SSO

Configure any SAML-compliant provider with Lovable SSO

Use this guide for any SAML provider.

Required values

• ACS URL: https://auth.lovable.dev/\_\_/auth/handler
• Audience / Entity ID: https://auth.lovable.dev/\_\_/auth/handler
• Required attributes: email, display_name

Provider mapping

Common field names across providers:

• ACS URL may be called: Single Sign-On URL, Reply URL, Assertion Consumer Service URL
• Audience may be called: SP Entity ID, Audience URI, Identifier
• Attribute mapping may be called: Attribute Statements, User Attributes & Claims

Steps

1. Create a SAML application

   Create a new SAML 2.0 application in your provider.

2. Configure endpoints

   Set both ACS and Audience/Entity ID to https://auth.lovable.dev/\_\_/auth/handler.

3. Map attributes

   Ensure email and display_name are included in the SAML assertion.

4. Assign users

   Assign the application to users/groups who should access Lovable.

Troubleshooting

Invalid Audience or ACS

Ensure both values match https://auth.lovable.dev/\_\_/auth/handler exactly.

Attributes missing

Add email and display_name mappings in your provider.