Kinde · Const

SAML

SAML is an authentication protocol for Kinde enterprise connections. Kinde acts as the service provider, while an external identity provider authenticates users; the Entity ID identifies the connection and must match on both sides.

How it works

SAML is an authentication protocol that Kinde supports for enterprise connections. Kinde operates as the service provider, while an external identity provider supplies the SAML authentication; the connection’s Entity ID identifies the service provider and must be configured identically on both sides.

Key points

SAML is available as an authentication protocol for Kinde enterprise connections.
Kinde is the SAML service provider, so the integration requires a separate identity provider.
The Entity ID does not need a prescribed format; a random alphanumeric value is acceptable.
Successful SAML SSO depends on the Entity ID matching across Kinde and the identity provider.

Common mistakes

The Entity ID must match exactly between Kinde and the identity provider. An older Microsoft application may additionally require the spn: prefix.

Example: Define a SAML Entity ID

const entityId = "5836g209gbhw09r8y0913";
console.log(entityId);

Creates the random alphanumeric Entity ID used to identify the SAML service-provider connection.

When to use it

Authenticate organization users with SAML

Enterprise single sign-on

Connect Kinde to an external IdP

Identity-provider integration

Configure a matching Entity ID

Service-provider identification

Interview questions

QWhat role does Kinde play in a custom SAML integration?

Kinde can use SAML for enterprise authentication, acting as the service provider while an external identity provider performs authentication. The connection is configured with an Entity ID that identifies the service provider.

Follow-up: What must be synchronized between Kinde and the IdP? The Entity ID must be configured with the same value in both systems.

QWhat is the purpose of the SAML Entity ID?

The Entity ID is a value assigned to the SAML connection. It can be a random alphanumeric string, but the same value must be entered in Kinde and the identity provider.

Follow-up: What naming might an IdP use for this field? It may appear as Audience, SP Entity ID, or Entity ID.

QHow should an Entity ID be configured?

For a custom SAML connection, configure the Entity ID in Kinde and then configure the identical value in the IdP’s SAML application. This matching is required for SSO to work.

Follow-up: What exception is documented for Microsoft Azure? Older applications may require spn: at the beginning of the Entity ID in Kinde.

Custom SAML enterprise connection
Entity ID
identity provider (IdP)
service provider (SP)
SAML SSO

Source: Custom SAML enterprise connection. Checked 2026-10-15.