Hi! quick question from a customer on the post was trying to setup SSO. they were getting this error on IdP initiated login, and did not see any option to turn on Service Principle initiated login. my understanding is that for IdP initiated login, the Post Authentication Redirect URL determines where users are sent after successful SSO, and adding this URL is mandatory for IdP-Initiated SSO and acts as the default landing page for SAML or OIDC logins. it can be overridden in SDK/API calls. is this correct? and what would the URL be for them to add in? is this the url for our app?

You need to implement IdP Initiated: https://docs.descope.com/sso/idp-initiated#implementing-idp-initiated-sso-with-descope-flows

@Doron Sharon - based on the user's error message, does this mean that we don't have the flows set up for our platform to support IdP iniated login? i thought we did, just asking about what they're supposed to put for post-authentication redirect url

Right, need to follow the steps in the article I sent.

our platform is already configured for idp initiated login

So just set the post auth url to the page with the flow

not to the login screen, but to the widget (in our settings page) for the admin?

The Post Authentication Redirect URL should point to the page where your Descope flow is embedded and capable of handling the IdP callback. Is that your login page or the admin settings page?