From e3f754fb9bfc24c5f3f936ad5d765ba731866393 Mon Sep 17 00:00:00 2001
From: Mateusz Mandera <mateusz.mandera@zulip.com>
Date: Thu, 30 Mar 2023 00:43:04 +0200
Subject: [PATCH] help center: Document SAML configuration steps with Auth0.

Auth0 is another SAML IdP that we haven't detailed the instructions for
yet.
---
 help/saml-authentication.md            | 30 ++++++++++++++++++++++++++
 zerver/lib/markdown/tabbed_sections.py |  1 +
 2 files changed, 31 insertions(+)

diff --git a/help/saml-authentication.md b/help/saml-authentication.md
index 1828487694..c25f880c5d 100644
--- a/help/saml-authentication.md
+++ b/help/saml-authentication.md
@@ -11,6 +11,7 @@ This page describes how to configure SAML authentication with several common pro
 * OneLogin
 * AzureAD
 * Keycloak
+* Auth0
 
 Other SAML providers are supported as well.
 
@@ -177,6 +178,35 @@ providers.
 
     Your Keycloak realm URL will look something like this: `https://keycloak.example.com/auth/realms/yourrealm`.
 
+{tab|auth0}
+
+{!upgrade-to-plus-if-needed.md!}
+
+1. Set up SAML authentication by following [Auth0's documentation](https://auth0.com/docs/authenticate/protocols/saml/saml-sso-integrations/configure-auth0-saml-identity-provider#configure-saml-sso-in-auth0)
+   to create a new application. You don't need to save the certificates or other information detailed.
+   All you will need is the **SAML Metadata URL**.
+1. In the **Addon: SAML2 Web App** **Settings** tab, set the **Application Callback URL** to
+   `https://auth.zulipchat.com/complete/saml/`.
+1. Edit the **Settings** section to match:
+
+    ```
+    {
+      "audience": "https://zulipchat.com",
+      "mappings": {
+        "email": "email",
+        "given_name": "first_name",
+        "family_name": "last_name"
+      },
+      "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
+    }
+    ```
+
+1. {!send-us-info.md!}
+
+     1. Your organization's URL
+     2. The **SAML Metadata URL** value mentioned above. It contains required **Identity Provider** metadata.
+     {!saml-login-button.md!}
+
 {end_tabs}
 
 !!! tip ""
diff --git a/zerver/lib/markdown/tabbed_sections.py b/zerver/lib/markdown/tabbed_sections.py
index 0ed3ebbe10..48f30477a6 100644
--- a/zerver/lib/markdown/tabbed_sections.py
+++ b/zerver/lib/markdown/tabbed_sections.py
@@ -88,6 +88,7 @@ TAB_SECTION_LABELS = {
     "onelogin": "OneLogin",
     "azuread": "AzureAD",
     "keycloak": "Keycloak",
+    "auth0": "Auth0",
     "logged-in": "If you are logged in",
     "logged-out": "If you are logged out",
     "user": "User",