Hi
@Aksha Malik
To clarify, the SP Entity ID cannot be provided or overridden by the customer.
Descope always acts as the Service Provider in the SAML flow, and the SP Entity ID is automatically generated and managed by Descope. This value must be used as-is when configuring trust on your IdP side. Allowing a custom or customer-supplied SP Entity ID isn’t supported and would not be secure.
Even if you use Descope’s
SSO Setup Suite (S4) configuration, the roles remain the same:
• Descope = Service Provider
• Your system (Okta, Azure AD, etc.) = Identity Provider
S4 only allows you to manage the IdP configuration directly; it does not change SP ownership or identifiers.