> For the complete documentation index, see [llms.txt](https://docs.k9.io/key9-identity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.k9.io/key9-identity/web/marketplace/wiz.md).

# Wiz

1. Service Provider ID (SP Entity ID):Can be found in the Wiz portal, via Details for your SAML Provider.
2. Service Provider Login URL (SSO URL):Can be found in the Wiz portal, via Details for your SAML Provider.
3. Service Provider Logout URL (SLO URL):Can be found in the Wiz portal, via Details for your SAML Provider.
4. IdP-Initiated Login URL:This will typically start with client\_id and not https.

Please see Wiz documentation for setting up SSO. (You must be logged into Wix Portal to View Documents)

[Wiz documentation can be found here.](https://docs.wiz.io/wiz-docs/docs/configure-generic-sso)

**Start configuring the SAML identity provider in Wiz**

1. In the Wiz portal, navigate go to **Settings** > **Access Management** > **SSO & Login Security**, then click **Add Identity Provider**.
2. In the **New SAML Identity Provider** page, enter **Key9-Identity** as **SAML Name**. Then click **Continue**. The values required for Key9 (IdP) are generated.

From the **Details for your SAML Provider** screen Copy and paste the following URLs into Key9 **Setup Items**

1. **Service Provider ID (SP Entity ID)**
2. **Service Provider Login URL (SSO URL)**
3. **Service Provider Logout URL (SLO URL)**
4. **Enable IdP-initiated logins** and Copy **IdP-Initiated Login URL**

Click the **Create Application** button in Key9.

After you have created your Key9 application, click the **SSO** tab in the side navigation.

**Back in the Wiz portal:**

1. Leave the **Enable Authentication Request Signing** disabled.
2. Leave the **Encrypt SAML Attributes** disabled.

Return to the open tab with Wiz. You should be on the **New SAML Identity Provider** > **SSO Providers Details** page.

Enter the following values from Key9 into these Wiz fields:

1. Copy the Key9 **SSO** url to the **Identity provider Single Sign-On URL** field.
2. Copy the Key9 **SLO** url to the **Identity provider Single Log-Out URL** field.
3. Copy the Key9 **Entity ID** url to the **Identity Provider Issuer URL or ID** field.
4. Copy the Key9 **X.509 Certificate** to the **Public Certificate** field.

(To view and copy the x509 certificate in Key9, select **View Certificate Details** from the **Certificate Options** dropdown menu, then click the copy icon.)

**Click Continue.**

Refer to Wix documentation for configuring group mappings. (You must be logged into Wix Portal to View Documents)

[Configure group mapping in Wiz](https://docs.wiz.io/wiz-docs/docs/configure-generic-sso#configure-group-mapping-in-wiz)

\-------------------

By default, applications are not active upon creation. Active applications are immediately available to assign groups. Applications should only be activated when you have configured the Service Provider (SP).