> ## Documentation Index
> Fetch the complete documentation index at: https://auth0.com/llms.txt
> Use this file to discover all available pages before exploring further.
> Learn how to configure the Auth0 as an identity provider using the SAML2 Web App Addon for Heroku.
# Configure Heroku as SAML Service Provider
Use the following SAML configuration for Heroku.
## Configure SAML SSO in Auth0
1. Go to [Dashboard > Applications > Applications](https://manage.auth0.com/#/applications) and either create a new application or click the name of an application to update.
2. Go to the **Addons** tab and enable the **SAML2 Web App** toggle.
3. On the **Settings** tab, set the **Application Callback URL** to the **ACS URL** for your organization from the Settings page in the Single Sign-On section in Heroku.
4. Paste the following code into the **Settings** text box and click **Debug**.
```json lines theme={null}
{
"audience":"THE-HEROKU-ENTITY-ID",
"mappings": {
"email": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
},
"createUpnClaim": false,
"passthroughClaimsWithNoMapping": false,
"mapUnknownClaimsAsIs": false,
"mapIdentities": false,
"nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
"nameIdentifierProbes": [
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
]
}
```
The `audience` parameter is the **Heroku Entity ID** from the Settings page in Heroku. It will be formatted like this: `https://sso.heroku.com/saml/{yourHerokuOrg}.`
5. Scroll to the bottom of the page and click **Enable**.
6. On the **Usage** tab, locate **Identity Provider Metadata**, and click **Download** to download the metadata file. You'll need this when you configure Auth0 as the identity provider in Heroku.
## Configure SAML SSO in Heroku
In Heroku, on the Settings page in the Single Sign-On section, click **Upload Metadata** and select the file containing the **Identity Provider Metadata** you downloaded in the previous step.