Proof

Test Single Sign-On in Fairfax – Proof Help Center

The article explains how organizations can test single sign-on (SSO) in Proof's Fairfax environment by configuring their identity provider (IDP) with specific SAML settings, ensuring the Fairfax organization structure matches production for existing customers, and using only test contact information since Fairfax sends real transaction emails.

Audience: Organizations

The short answer: Here's how to test single sign-on (SSO) in Fairfax, Proof's testing environment. Before testing, read the Domain-based single sign-on (SSO) overview for more about SSO and how to set it up.

Fairfax simulates the full transaction experience and actually sends transaction emails. Do not use customer contact information — this protects privacy and avoids confusion.


How it works

  • New customers: If you aren't already using the Proof platform, testing may occur in production.
  • Existing customers: Testing on Fairfax is mandatory. The Fairfax organization must match the same parent/child organization structure as expected in production.

Fairfax IDP configuration

Configure your IDP with the following Proof SAML data:

  • Entity (or Issuer) ID: https://api.fairfax.proof.com/saml/consume
  • Assertion Consumer Service (ACS) URL: https://api.fairfax.proof.com/saml/consume
  • SP metadata URL: https://api.fairfax.proof.com/saml/metadata
    Also available as a file — see the attachment at the bottom of this article: proof_fairfax_saml_metadata.xml

Summary Checklist

  • Existing customers: Fairfax org structure must match production before testing.
  • Configure IDP with the Fairfax Entity ID, ACS URL, and SP metadata URL above.
  • Use test contact information only — Fairfax sends real transaction emails.

Still unsure? Contact Proof Support for help.