SAML Destination URL Validation (Manage)

Sumo Logic now validates the Destination URL in the SAML response from your identity provider (IdP) against the Assertion Consumer Service (ACS) URL configured in your Sumo Logic SAML configuration. This follows Section 3.5.5.2 of the SAML 2.0 Bindings specification and strengthens the security of your single sign-on (SSO) setup. Learn more.

Rollout:

• November 16, 2026. Users in organizations with a mismatch see a warning once per session at login. Logins are not blocked.
• January 29, 2027. Sumo Logic rejects logins with a mismatched Destination URL.

info

SSO administrators need to set both the ACS URL and the Destination URL in their IdP to match the Assertion Consumer URL on the SAML page in Sumo Logic before January 29, 2027.