Hi all! I’m building a SAML integration, and apologies if I’m just missing the documentation for this. Given that my app’s signin/ACS URL will receive assertions for different organizations using my app, what’s the best way to look up the right IP metadata file for the incoming assertion? (My understanding is that every Okta organization will have its own certificate for my app; correct me if that’s mistaken.) Should I be looking at the “saml2:Issuer” on the incoming SAMLResponse, then looking up the metadata file with the matching entity ID? Or something else?
Many thanks!