Skip to content

docs: Add guidance for SCIM/SAML setup with multiple domains#16163

Open
yasen-posthog wants to merge 1 commit intomasterfrom
cursor/scim-saml-multiple-domains-f21c
Open

docs: Add guidance for SCIM/SAML setup with multiple domains#16163
yasen-posthog wants to merge 1 commit intomasterfrom
cursor/scim-saml-multiple-domains-f21c

Conversation

@yasen-posthog
Copy link
Copy Markdown
Contributor

Changes

Adds a new "Multiple domains" section to the SSO, SAML, and SCIM documentation explaining that organizations with multiple verified authentication domains should set up separate Identity Provider apps for each domain.

This addresses a recurring support issue where users are provisioned via SCIM through one domain's app but cannot authenticate via SAML because their email domain doesn't match the SAML configuration. The documentation now explains:

  • Why separate IdP apps are needed (SAML config lookup is based on email domain)
  • What happens when domains are mismatched (SCIM provisioning works but SAML auth fails)
  • The recommended setup: create a separate IdP app for each domain with both SAML and SCIM configured, and assign users to the app matching their email domain

Checklist

  • I've read the docs and/or content style guides.
  • Words are spelled using American English
  • Use relative URLs for internal links
  • I've checked the pages added or changed in the Vercel preview build
  • If I moved a page, I added a redirect in vercel.json

Slack Thread

Open in Web Open in Cursor 

Adds a new 'Multiple domains' section explaining that organizations with
multiple verified authentication domains should set up separate IdP apps
for each domain with both SAML and SCIM configured.

This addresses a common support issue where users are provisioned via SCIM
through one domain's app but cannot authenticate via SAML because their
email domain doesn't match the SAML configuration.

Co-authored-by: Yasen <yasen-posthog@users.noreply.github.com>
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2026

Deploy preview

Status Details Updated (UTC)
🟢 Ready View preview Apr 03, 2026 10:47AM

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2026

Vale prose linter → found 0 errors, 14 warnings, 6 suggestions in your markdown

Full report → Copy the linter results into an LLM to batch-fix issues.

Linter being weird? Update the rules!

contents/docs/settings/sso.mdx — 0 errors, 14 warnings, 6 suggestions
Line Severity Message Rule
68:81 warning Capitalize 'Logs' for PostHog's product. Use 'logs' for the general industry concept. PostHogBase.ProductNames
86:81 warning Capitalize 'Logs' for PostHog's product. Use 'logs' for the general industry concept. PostHogBase.ProductNames
106:96 warning 'OAuth' is a possible misspelling. PostHogBase.Spelling
108:54 warning Use American English. Use 'organization' instead of 'organisation'. PostHogBase.AmericanEnglish
108:121 warning 'OAuth' is a possible misspelling. PostHogBase.Spelling
108:139 warning 'OAuth' is a possible misspelling. PostHogBase.Spelling
111:39 warning Use 'URL' instead of 'url'. Vale.Terms
112:53 warning Use 'URL' instead of 'url'. Vale.Terms
127:39 warning Use 'URL' instead of 'url'. Vale.Terms
144:49 warning 'OAuth' is a possible misspelling. PostHogBase.Spelling
152:139 warning 'OAuth' is a possible misspelling. PostHogBase.Spelling
158:326 suggestion Address the reader directly. Use 'you can' instead of 'users can'. PostHogDocs.DirectAddress
168:58 suggestion Address the reader directly. Use 'you' instead of 'the user'. PostHogDocs.DirectAddress
170:103 suggestion Address the reader directly. Use 'you can' instead of 'users can'. PostHogDocs.DirectAddress
238:38 warning Capitalize 'Logs' for PostHog's product. Use 'logs' for the general industry concept. PostHogBase.ProductNames
278:23 suggestion Address the reader directly. Use 'you' instead of 'the user'. PostHogDocs.DirectAddress
279:28 suggestion Address the reader directly. Use 'you' instead of 'the user'. PostHogDocs.DirectAddress
280:27 suggestion Address the reader directly. Use 'you' instead of 'the user'. PostHogDocs.DirectAddress
322:29 warning Capitalize 'Logs' for PostHog's product. Use 'logs' for the general industry concept. PostHogBase.ProductNames
357:58 warning 'Entra' is a possible misspelling. PostHogBase.Spelling

@yasen-posthog yasen-posthog marked this pull request as ready for review April 3, 2026 10:39
@yasen-posthog yasen-posthog requested review from a team and a-lider April 3, 2026 10:39
@yasen-posthog yasen-posthog self-assigned this Apr 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants