# What URL to provide SaaS app if using Custom Auth Server

**URL:** <https://devforum.okta.com/t/what-url-to-provide-saas-app-if-using-custom-auth-server/24097>\
**Category:** OAuth/OIDC\
**Created:** [April 27, 2023, 4:06pm UTC](https://devforum.okta.com/t/what-url-to-provide-saas-app-if-using-custom-auth-server/24097 "2023-04-27T16:06:04Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ntalbot77](https://avatars.discourse-cdn.com/v4/letter/n/fbc32d/32.png) [@ntalbot77](https://devforum.okta.com/u/ntalbot77)\
**Post date:** [April 27, 2023, 4:06pm UTC](https://devforum.okta.com/t/what-url-to-provide-saas-app-if-using-custom-auth-server/24097/1 "2023-04-27T16:06:04Z")

</div>

What URL should I supply a SaaS application that we have on a custom auth server? I gave them the issuer URL, but they get a 404 on it

[https://company.oktapreview.com/oauth2/aus7vjjbwnCM9zRoJ1d7](https://company.oktapreview.com/oauth2/aus7vjjbwnCM9zRoJ1d7)

If I give them the org URL it works, but it uses the org token server, I need it to use the custom auth server tokens

---

<div class="post-metadata">

**Author:** ![erik](https://avatars.discourse-cdn.com/v4/letter/e/b5ac83/32.png) [@erik](https://devforum.okta.com/u/erik)\
**Post date:** [April 27, 2023, 11:07pm UTC](https://devforum.okta.com/t/what-url-to-provide-saas-app-if-using-custom-auth-server/24097/2 "2023-04-27T23:07:24Z")

</div>

Hello,

The following URL would show the endpoints for your custom authorization server,

```auto
https://company.oktapreview.com/oauth2/aus7vjjbwnCM9zRoJ1d7/.well-known/openid-configuration

```

[https://company.oktapreview.com/oauth2/aus7vjjbwnCM9zRoJ1d7](https://company.oktapreview.com/oauth2/aus7vjjbwnCM9zRoJ1d7) would be the issuer URL.  
What specifically does the documentation ask for?

Thank You,

---

<div class="post-metadata">

**Author:** ![ntalbot77](https://avatars.discourse-cdn.com/v4/letter/n/fbc32d/32.png) [@ntalbot77](https://devforum.okta.com/u/ntalbot77)\
**Post date:** [April 28, 2023, 9:46pm UTC](https://devforum.okta.com/t/what-url-to-provide-saas-app-if-using-custom-auth-server/24097/3 "2023-04-28T21:46:06Z")

</div>

Thanks for the reply Erik.

The SaaS app I am trying to integrate has just one field to configure for the okta tenant, and they have no other dev personnel to configure anything custom, its very generic. So this works no problem…[https://company.oktapreview.com](https://company.oktapreview.com)…and it obviously uses the org auth server…can you give me an example of what would be needed to be configured on the SaaS side to get them to point to the custom auth server

---

<div class="post-metadata">

**Author:** ![erik](https://avatars.discourse-cdn.com/v4/letter/e/b5ac83/32.png) [@erik](https://devforum.okta.com/u/erik)\
**Post date:** [April 30, 2023, 7:03am UTC](https://devforum.okta.com/t/what-url-to-provide-saas-app-if-using-custom-auth-server/24097/4 "2023-04-30T07:03:23Z")

</div>

You might need to check with SaaS vendor.

My assumption is with the Org Authorization Server (AS) where all you provide is the issuer,  
[https://company.oktapreview.com](https://company.oktapreview.com)  
Then when the integration constructs OAuth endpoints such as /authorize it is appending /oauth2/v1/ to the issuer you provide.  
[https://company.oktapreview.com/oauth2/v1/authorize](https://company.oktapreview.com)

The problem with this is with a custom AS when you provide the issuer  
[https://company.oktapreview.com/oauth2/aus7vjjbwnCM9zRoJ1d7](https://httbin.org)  
The integration will still append /oauth2/v1/ which would give,  
[https://company.oktapreview.com/oauth2/aus7vjjbwnCM9zRoJ1d7/oauth2/v1/authorize](https://httbin.org)  
This is incorrect, it would need to be,  
[https://company.oktapreview.com/oauth2/aus7vjjbwnCM9zRoJ1d7/v1/authorize](https://httbin.org)

When you configure the integration with your custom AS and then try to authorize you should be able to confirm this my viewing the dev console of the browser and see where the authorize request is being sent to, or check the address bar.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 14, 2024, 5:55pm UTC](https://devforum.okta.com/t/what-url-to-provide-saas-app-if-using-custom-auth-server/24097/5 "2024-02-14T17:55:10Z")

</div>


