> ## Documentation Index
> Fetch the complete documentation index at: https://auth0.com/llms.txt
> Use this file to discover all available pages before exploring further.

> Learn how to configure the Auth0 as the identity provider using the SAML2 Web App addon for Oracle Eloqua.

# Configure Oracle Eloqua Marketing Cloud as SAML Service Provider

Use the following <Tooltip tip="Security Assertion Markup Language (SAML): Standardized protocol allowing two parties to exchange authentication information without a password." cta="View Glossary" href="/docs/glossary?term=SAML">SAML</Tooltip> configuration for Oracle Eloqua Marketing Cloud.

## Configure SAML SSO in Auth0

1. Go to [Dashboard > Applications > Applications](https://manage.auth0.com/#/applications) and either create a new application or click the name of the application you want to update.
2. Go to the **Addons** tab and enable the **SAML2 Web App** toggle.
3. On the **Settings** tab, set the **Application Callback URL** to: `https://login.eloqua.com/auth/saml2/acs`.

   <Frame>
     <img src="https://mintlify.s3.us-west-1.amazonaws.com/auth0/docs/images/cdy7uua7fh8z/6dJgYkcOgMZ73HVTkAWt1x/fe9dbbf306e6c587cb3326c00a3b4e1f/2025-02-27_13-59-00.png" alt="Dashboard Applications Applications Addons Tab SAML2 Web App Settings Tab" />
   </Frame>
4. Paste the following code into the **Settings** text box and click **Debug**.

   ```json lines theme={null}
   {
       "audience": "<Service Provider Entity Url from within Eloqua>",
        "recipient": "https://login.eloqua.com/auth/saml2/acs",
          "mappings": {
       "user_id": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier",
       "email": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
       "name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name",
          },
        "nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
        "nameIdentifierProbes": [
       "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
       ],
        "destination": "https://login.eloqua.com/auth/saml2/acs"
         }
   ```

   Note that the `audience` is set to `http://foo`. This will be changed when the identity provider settings are completed on the Eloqua side.
5. Scroll to the bottom of the tab and click **Enable**.
6. On the **Usage** tab, locate the **Identity Provider Metadata** and click **Download** to download the metadata file. You'll need this when you configure Auth0 as the identity provider in Eloqua.

   <Frame>
     <img src="https://mintlify.s3.us-west-1.amazonaws.com/auth0/docs/images/cdy7uua7fh8z/3T90BDpyTXFUWDp1JkncBU/86bdba6bed8130b34b42b25c9bf2d232/dashboard-applications-applications-addons-saml2-web-app-usage.png" alt="Dashboard Applications Applications Addons Tab SAML2 Web App Usage Tab" />
   </Frame>

## Configure SAML SSO in Oracle Eloqua

1. Login as Admin on Eloqua and click on **Settings > Users > Single Sign-On > Identity Provider Settings**.
2. Click **Upload Identity Provider from Metadata**. Upload the **Identity Provider metadata** you downloaded from the **Usage** tab in the Auth0 Dashboard.
3. Browse to find the downloaded metadata file.
4. Edit the newly added identity provider and complete the following steps:

   1. Set the **User Identity Mapping** to `Assertion contains the Email Address from the User object` and click **Save**.
   2. From the **Identity Provider Details** copy the **Service Provider Entity URL**.
   3. Within ELOQUA IdP settings, if this is the default IdP, mark this IdP as default.

## Update Audience Restriction in Auth0

Use the **Service Provider Entity URL** copied from the <Tooltip tip="Identity Provider (IdP): Service that stores and manages digital identities." cta="View Glossary" href="/docs/glossary?term=identity+provider">identity provider</Tooltip> settings in Eloqua to set the `audience` restriction in the <Tooltip tip="Auth0 Dashboard: Auth0's main product to configure your services." cta="View Glossary" href="/docs/glossary?term=Auth0+Dashboard">Auth0 Dashboard</Tooltip>.

1. Go to [Dashboard > Applications > Applications](https://manage.auth0.com/#/applications) and click the name of the application you want to update.
2. Go to the **Addons** tab and enable the **SAML2 Web App** toggle.
3. On the **Settings** tab, update the `audience` to the value you copied from Eloqua.

## Test configuration

**Login to Eloqua with Auth0** should be enabled now. You can sign in to Eloqua with both IdP-initiated login and SP-initiated login.

* For SP-initiated login, go to \<[https://login.eloqua.com/auth/saml2>](https://login.eloqua.com/auth/saml2>) and enter your company name and start the SAML login process with Auth0.
* For IdP-Initiated login use the **Identity Provider Login URL** defined here: **Dashboard > Applications > Applications** on the **Addons** tab,  **SAML 2 Web App**, **Usage** tab.