Objective

This article explains how to review and update the identity provider (IdP) details on an existing single sign-on profile, for example to rotate an expiring certificate or correct a changed sign-on URL.

Product

Twilio Organizations

Environment

Twilio Console

User Account Permission/Role(s) Required

SSO read permission to view the page and SSO update permission to change it. Without the update permission, Edit details is shown but disabled.

Procedure

1. In the Twilio Console, select Settings in the left sidebar.
2. Select Organization settings, then Single sign-on (SSO).
3. Select the profile you want to change, then open the Identity provider tab. A note warns that any changes on this page might break login for users that this SSO profile is enforced on.
4. The Identity provider details section shows Friendly name, Issuer ID/URL, Single sign-on URL, Certificate expiration, and the X.509 certificate public key.
5. Select Edit details. The Edit IdP details panel opens.
6. Update any of Friendly name, Issuer ID/URL, Single sign-on URL, and X.509 certificate public key.
7. Select Save. A confirmation appears: "SSO profile updated successfully."

Additional Information

• All four fields are required. Leaving one blank, or entering only whitespace, shows a required error on that field.
• Friendly name must contain at least one letter and be at most 64 characters. Issuer ID/URL must be between 1 and 128 characters.
• Single sign-on URL must be an http or https address — other schemes and malformed addresses are rejected.
• The certificate must be structurally valid. A certificate pasted without the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines is accepted and wrapped for you, but one with PEM headers and an incomplete body is rejected.
• Select Cancel to close the panel without saving; reopening it restores the values currently stored.
• The Twilio metadata section on this tab lets you download the profile's XML metadata and copy the Audience URL/Entity ID and SSO URL / Destination URL / Recipient URL values for your identity provider.
• If the save fails, an error message appears and the stored settings are unchanged.
• If the tab cannot be loaded, it shows "Unable to load identity provider details".

This content was generated by AI and reviewed, edited, and verified by a human.