Configure SAML 2.0 for Vercel

This guide provides instructions on configuring SAML 2.0 Single Sign-On (SSO) for the Vercel app.

Contents

• Supported features
• Prerequisites
• Integrate the app in Okta
• Verify SP-initiated SSO
• Supported SAML attributes

---

Supported features

Vercel supports the following features:

• SP-initiated SSO
• IdP-initiated SSO

Prerequisites

• Ensure that you have an Okta admin role with permission to manage apps.
• Ensure that you're an Owner of the Vercel team.

Integrate the app in Okta

1. In the Admin Console, go to Applications > Applications.
2. Click Browse App Catalog.
3. Search for and select the Vercel app.
4. Click Add Integration.
5. On the General Settings tab, enter an Application label and click Done.
6. On the Sign On tab, in the SAML section, copy the Metadata URL and store it for later use.

Configure SAML in Vercel

1. Sign in to Vercel.
2. In the left navigation, click Settings > Security and Privacy.
3. Scroll down to the SAML Single Sign-On section and click Configure.
4. In the configuration wizard, go to the step that shows the ACS URL and Audience URI. Copy these values and store them for later use.
5. In the IDP Metadata URL field, paste the Metadata URL you copied from Okta.
6. Copy the Application username format value (user.getInternalProperty("id")) shown in the wizard and store it for later use.
7. Complete the SSO test to verify that the connection is successful.
8. In the SAML Single Sign-On section, select the option to require team members to sign in with SAML.

Configure the SP metadata in Okta

1. In the Admin Console, go to Applications > Applications.
2. Select the Vercel app.
3. On the Sign On tab, click Edit.
4. In Advanced Sign-on Settings, paste the ACS URL value you copied from Vercel into the ACS URL field.
5. Paste the Audience URI value you copied from Vercel into the Audience URI field.
6. For Application username format, select Custom and enter user.getInternalProperty("id").
7. Click Save.

Verify SP-initiated SSO

Go to https://vercel.com/login. Enter your org slug and click Continue with SAML SSO. You're redirected to the sign-in page for your org.

Supported SAML attributes

Vercel supports these SAML attributes:

Name	Value
email	user.email
firstName	user.firstName
lastName	user.lastName