From 0e4cd029fa711db34e640012e0e67b3d0ce35e4d Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Fri, 6 Jun 2025 10:19:15 -0600 Subject: [PATCH] Setup experience guide: document wrong callback URL (#29791) Document what happens if the URL is set incorrectly. --- articles/macos-setup-experience.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/macos-setup-experience.md b/articles/macos-setup-experience.md index e8fba435e3..84feb2d5c4 100644 --- a/articles/macos-setup-experience.md +++ b/articles/macos-setup-experience.md @@ -24,7 +24,7 @@ Using Fleet, you can require end users to authenticate with your identity provid ### End user authentication -1. Create a new SAML app in your IdP. In your new app, use `https:///api/v1/fleet/mdm/sso/callback` for the SSO URL. +1. Create a new SAML app in your IdP. In your new app, use `https:///api/v1/fleet/mdm/sso/callback` for the SSO URL. If this URL is set incorrectly, end users won't be able to enroll. On iOS hosts, they'll see a "This screen size is not supported yet" error message. 2. In your new SAML app, set **Name ID** to email (required). Fleet will trim this email and use it to populate and lock the macOS local account **Account Name**. For example, a "johndoe@example.com" email turn into a "johndoe" account name.