Objective
This article explains where to find the SAML service provider metadata Twilio needs configured on your side, so you can import it into your identity provider or copy the individual values by hand.
Product
Twilio Organizations
Environment
Twilio Console
User Account Permission/Role(s) Required
SSO read permission for the profile.
Procedure
- In the Twilio Console, select Settings in the left sidebar.
- Select Organization settings, then Single sign-on (SSO).
- Select the single sign-on profile you are configuring, then open the Identity provider tab.
- In the Twilio metadata section, either:
- Select Download XML to download the metadata file and import it into your identity provider, or
- Copy the individual values: Audience URL/Entity ID and SSO URL / Destination URL / Recipient URL.
- Paste or import those values into the SAML configuration in your identity provider.
Additional Information
- The same metadata is offered on the first step of the single sign-on setup wizard, where the values are listed separately as Audience URL/Entity ID, Assertion consumer service (ACS)/ SSO URL, Recipient URL (Optional), and Destination URL (Optional).
- Download XML is disabled while the metadata is still being prepared, or if no metadata is available for the profile.
- If the download fails, "Failed to download metadata. Please try again." appears.
- On your identity provider you must also set the NameID format to EmailAddress with the user's email address as its value, and configure both the SAML Response and SAML Assertion to be signed.
This content was generated by AI and reviewed, edited, and verified by a human.