Integrating SAML with Panther Enterprise

Integrate any SAML Identity Provider (IdP) with Panther Enterprise in three easy steps:

  1. Deploy Panther Enterprise and navigate to the General Settings page. Note the values shown for "Audience" and "ACS URL":

  2. Add a "test" or "manual" SAML integration to your IdP with the following settings:

    • Audience: urn:amazon:cognito:sp:USER_POOL_ID (copied from the General Settings in Panther)

    • ACS / Consumer URL: https://USER_POOL_HOST/saml2/idpresponse (copied from the General Settings in Panther)

    • SAML Attribute Mapping:

      • PantherEmail -> user email

      • PantherFirstName -> first/given name

      • PantherLastName -> last/family name

    • Grant access to the appropriate users

  3. From the Panther settings page, enable SAML with:

    • A default Panther role of your choice

    • The issuer/metadata URL from the SAML integration in your IdP

Click "Save" in the Panther settings page and then you're done! Now, clicking the "Login with SSO" button will redirect you to your Identity Provider:

For examples, see the OneLogin and Okta integration guides.