From bb58452796a719f5caaed55e79a831b093285b47 Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Wed, 8 Apr 2026 10:34:44 -0400
Subject: [PATCH] Update copy in Settings > Integrations: Clarify SSO v. IdP
 (#42681)

For the following quick win:
- https://github.com/fleetdm/fleet/issues/42737
---
 .../EndUserAuthSection/EndUserAuthSection.tsx    |  9 ++++-----
 .../IdentityProviderSection.tsx                  | 16 +++++++++++-----
 .../admin/IntegrationsPage/cards/Sso/Sso.tsx     | 16 ++++++++++++++++
 3 files changed, 31 insertions(+), 10 deletions(-)

diff --git a/frontend/pages/admin/IntegrationsPage/cards/IdentityProviders/components/EndUserAuthSection/EndUserAuthSection.tsx b/frontend/pages/admin/IntegrationsPage/cards/IdentityProviders/components/EndUserAuthSection/EndUserAuthSection.tsx
index 26c83abec2..b993bf91eb 100644
--- a/frontend/pages/admin/IntegrationsPage/cards/IdentityProviders/components/EndUserAuthSection/EndUserAuthSection.tsx
+++ b/frontend/pages/admin/IntegrationsPage/cards/IdentityProviders/components/EndUserAuthSection/EndUserAuthSection.tsx
@@ -137,15 +137,14 @@ const EndUserAuthSection = ({
     return (
       <form>
         <p>
-          If enabled in{" "}
+          After configuring, head to{" "}
           <strong>
             Controls &gt; Setup experience &gt; End user authentication
-          </strong>
-          , end users will be required to authenticate when they first set up
-          their host.{" "}
+          </strong>{" "}
+          to require end users to authenticate.{" "}
           <CustomLink
             text="Learn more"
-            url="https://fleetdm.com/guides/setup-experience#end-user-authentication"
+            url="https://fleetdm.com/learn-more-about/end-user-authentication"
             newTab
           />
         </p>
diff --git a/frontend/pages/admin/IntegrationsPage/cards/IdentityProviders/components/IdentityProviderSection/IdentityProviderSection.tsx b/frontend/pages/admin/IntegrationsPage/cards/IdentityProviders/components/IdentityProviderSection/IdentityProviderSection.tsx
index 65849ebea4..f49eba6290 100644
--- a/frontend/pages/admin/IntegrationsPage/cards/IdentityProviders/components/IdentityProviderSection/IdentityProviderSection.tsx
+++ b/frontend/pages/admin/IntegrationsPage/cards/IdentityProviders/components/IdentityProviderSection/IdentityProviderSection.tsx
@@ -7,6 +7,8 @@ import { internationalTimeFormat } from "utilities/helpers";
 import { DEFAULT_USE_QUERY_OPTIONS } from "utilities/constants";
 import idpAPI from "services/entities/idp";
 
+import PATHS from "router/paths";
+
 import SettingsSection from "pages/admin/components/SettingsSection";
 import DataError from "components/DataError";
 import Spinner from "components/Spinner";
@@ -163,19 +165,23 @@ const IdentityProviderSection = () => {
         <PageDescription
           content={
             <>
-              Configure and manage integrations between Fleet and your identity
-              provider (IdP). Connecting your IdP enables mapping end users to
-              hosts and deleting{" "}
+              Connect your IdP to populate IdP host vitals and delete{" "}
               <TooltipWrapper
                 tipContent={
                   <>
-                    A <strong>Fleet user</strong> is considered an IT admin.
+                    A <strong>Fleet user</strong> manages Fleet.
                   </>
                 }
               >
                 Fleet users
               </TooltipWrapper>{" "}
-              when they are removed from your IdP.
+              when they are removed from your IdP. To configure authentication
+              for Fleet users and end users, head to{" "}
+              <CustomLink
+                text="Single sign-on (SSO)"
+                url={PATHS.ADMIN_INTEGRATIONS_SSO}
+              />
+              .
             </>
           }
           variant="right-panel"
diff --git a/frontend/pages/admin/IntegrationsPage/cards/Sso/Sso.tsx b/frontend/pages/admin/IntegrationsPage/cards/Sso/Sso.tsx
index aa7f7a3b2c..bb042ee451 100644
--- a/frontend/pages/admin/IntegrationsPage/cards/Sso/Sso.tsx
+++ b/frontend/pages/admin/IntegrationsPage/cards/Sso/Sso.tsx
@@ -3,6 +3,7 @@ import React, { useCallback, useRef, useState } from "react";
 import { IInputFieldParseTarget } from "interfaces/form_field";
 
 import SettingsSection from "pages/admin/components/SettingsSection";
+import PageDescription from "components/PageDescription";
 import Button from "components/buttons/Button";
 import Checkbox from "components/forms/fields/Checkbox";
 import CustomLink from "components/CustomLink";
@@ -352,6 +353,21 @@ const Sso = ({
 
   return (
     <SettingsSection title="Single sign-on (SSO)">
+      <PageDescription
+        content={
+          <>
+            Configure authentication for Fleet users logging into Fleet or end
+            users enrolling their hosts. To populate identity provider (IdP)
+            host vitals and automatically delete Fleet users, head to{" "}
+            <CustomLink
+              text="Identity provider (IdP)"
+              url={PATHS.ADMIN_INTEGRATIONS_IDENTITY_PROVIDER}
+            />
+            .
+          </>
+        }
+        variant="right-panel"
+      />
       <TabNav secondary>
         <Tabs
           selectedIndex={AUTH_TARGETS_BY_INDEX.indexOf(selectedAuthTarget)}