We are excited to announce Streamlit's preview release of SSO via generic SAML for our Streamlit for Teams Beta customers! 🎉

Generic SAML is just one of the authenticators supported by Streamlit for Teams. We have already released documentation for Microsoft ADFS, Azure AD, and Okta.

There are three steps your team will need to complete to configure SSO via generic SAML:

1. Please complete this form.

To complete steps 2 and 3, you will need an ACS URL, which Streamlit will provide by emailing you a private Google Drive link. Please complete this form to provide us with your email address and some basic information about your organization.

2. Provide Streamlit with a Token Signature (X.509 Certificate).

• Your Token Signature comes from your Identity Provider and is often located in an admin dashboard. The exact steps to download the Token Signature will vary based on your Identity Provider.
• Please share the Token Signature with Streamlit by uploading it here.

3. Provide Streamlit with an Identity Provider SSO URL.

• Your Identity Provider SSO URL comes from your Identity Provider and is often located in an admin dashboard. The exact steps to generate the Identity Provider SSO URL will vary based on your Identity Provider .
• Please share the IdP SSO URL with Streamlit by pasting it here.

4. Provide Streamlit with an IdP URI (Entity ID).

• Your Identity Provider URI (Entity ID) comes from your Identity Provider and is often located in an admin dashboard. The exact steps to generate the IdP URI (Entity ID) will vary based on your Identity Provider.
• Please share the IdP URI with Streamlit by pasting it here.

<aside> 🆘 Stuck? Let us know! Reach out to [email protected]

</aside>