Rename yo.html to index.html

yo.html → index.html

@@ -21,9 +21,16 @@
       <div>
         <p><strong>Prerequisites:</strong></p>
         <ul>
-          <li>Your organization must be on an <strong>Enterprise</strong> or <strong>Enterprise Plus</strong> plan to enable SAML-based SSO.</li>
-          <li>You must have administrator access to both your Okta organization and your Hugging Face Enterprise Hub organization.</li>
-          <li>For details about Hugging Face’s SSO options, visit the official documentation:
+          <li>Your organization must be on an <strong>Enterprise</strong> or <strong>Enterprise Plus</strong> plan to enable SAML-based Single Sign-On (SSO).</li>
+          <li>You must have <strong>administrator privileges</strong> in both your Okta organization and your Hugging Face Enterprise Hub organization.</li>
+          <li>Ensure your Hugging Face organization has a unique <strong>Organization Name</strong> and <strong>Organization ID</strong>. You will find these under <em>Organization Settings → SSO → SAML</em>.</li>
+          <li>Have your <strong>Okta Identity Provider (IdP) metadata</strong> available, including:
+            <ul>
+              <li>Identity Provider Single Sign-On URL</li>
+              <li>X.509 Certificate (full text including BEGIN/END markers)</li>
+            </ul>
+          </li>
+          <li>For more information about Hugging Face’s Enterprise SSO, see:
             <a href="https://huggingface.co/docs/hub/en/enterprise-sso" target="_blank">Hugging Face Enterprise SSO Documentation</a>.
           </li>
         </ul>
@@ -34,84 +41,111 @@
     <ul>
       <li><a href="#features">Supported Features</a></li>
       <li><a href="#steps">Configuration Steps</a></li>
+      <li><a href="#sp-initiated">SP-initiated SSO</a></li>
       <li><a href="#notes">Notes</a></li>
+      <li><a href="#support">Customer Support Contact</a></li>
     </ul>
     <hr>
 
-    <a name="features"></a><h2>Supported Features</h2>
-    <p>The Okta / Hugging Face Enterprise Hub SAML integration supports the following:</p>
+    <a name="features"></a>
+    <h2>Supported Features</h2>
+    <p>The Okta / Hugging Face Enterprise Hub SAML integration supports the following features:</p>
     <ul>
-      <li><strong>IdP-initiated SSO and SP-initiated SSO:</strong> Users can initiate authentication either from the identity provider (Okta) or from the service provider (Hugging Face).</li>
+      <li><strong>IdP-initiated SSO:</strong> Users can sign in to Hugging Face directly from the Okta dashboard.</li>
+      <li><strong>SP-initiated SSO:</strong> Users accessing Hugging Face content are redirected to Okta for authentication.</li>
+      <li><strong>JIT (Just-In-Time) provisioning:</strong> Supported for users authenticating via SAML (accounts are created upon first successful SSO login).</li>
+      <li><strong>Single Logout (SLO):</strong> Not currently supported.</li>
     </ul>
     <hr>
 
-    <a name="steps"></a><h2>Configuration Steps</h2>
+    <a name="steps"></a>
+    <h2>Configuration Steps</h2>
 
     <h3>Step 1 — Add the Hugging Face App from Okta Integration Network (OIN)</h3>
     <ol>
-      <li>Sign in to your Okta Admin Dashboard.</li>
-      <li>Go to <strong>Applications → Browse App Catalog</strong>.</li>
-      <li>Search for and select the application named <strong>Hugging Face</strong>.</li>
-      <li>Click <strong>Add Integration</strong>.</li>
+      <li>Sign in to your Okta Admin Console.</li>
+      <li>Navigate to <strong>Applications → Browse App Catalog</strong>.</li>
+      <li>Search for <strong>Hugging Face</strong> and click <strong>Add Integration</strong>.</li>
     </ol>
 
     <h3>Step 2 — Configure the Hugging Face App in Okta</h3>
-    <ol start="5">
-      <li>On the <strong>General Settings</strong> page, enter:
+    <ol start="4">
+      <li>On the <strong>General Settings</strong> page, specify:
         <ul>
           <li><strong>Application label:</strong> <kbd>Hugging Face</kbd></li>
           <li><strong>Organization Name:</strong> Your Hugging Face organization name</li>
           <li><strong>Organization ID:</strong> Your Hugging Face organization ID</li>
         </ul>
-        <p><em>Where to find these values:</em> In Hugging Face, go to <strong>Organization Settings → SSO → SAML</strong>. You will see both the Organization Name and Organization ID.</p>
+        <p><em>Where to find these values:</em> In Hugging Face, go to <strong>Organization Settings → SSO → SAML</strong>.</p>
         <p><img src="/static/images/hf-sso-saml-screenshot.png" alt="Hugging Face SSO SAML screenshot" style="max-width:100%;height:auto;"></p>
       </li>
-      <li>Click <strong>Next</strong>, review the Sign-On Options (username format should be <kbd>Email</kbd>), then click <strong>Done</strong>.</li>
-      <li><strong>Important:</strong> Ensure the administrator performing these steps is <strong>assigned</strong> to the Hugging Face app in Okta (via the Assignments tab).</li>
+      <li>Click <strong>Next</strong>, review the sign-on options (the username format should be <kbd>Email</kbd>), and then click <strong>Done</strong>.</li>
+      <li><strong>Important:</strong> Ensure the administrator performing these steps is <strong>assigned</strong> to the Hugging Face app in Okta under the <strong>Assignments</strong> tab.</li>
     </ol>
 
     <h3>Step 3 — Copy SAML Configuration from Okta</h3>
-    <ol start="8">
+    <ol start="7">
       <li>In the Hugging Face app in Okta, open the <strong>Sign On</strong> tab.</li>
-      <li>Locate the <strong>SAML 2.0</strong> section and click <strong>View SAML Setup Instructions</strong> (or go to Metadata Details).</li>
+      <li>Locate the <strong>SAML 2.0</strong> section and click <strong>View SAML Setup Instructions</strong>.</li>
       <li>Copy the following values:
         <ul>
           <li><strong>Identity Provider Single Sign-On URL</strong></li>
-          <li><strong>X.509 Certificate</strong> — copy the full certificate including <kbd>-----BEGIN CERTIFICATE-----</kbd> and <kbd>-----END CERTIFICATE-----</kbd>.</li>
+          <li><strong>X.509 Certificate</strong> — copy the full text including <kbd>-----BEGIN CERTIFICATE-----</kbd> and <kbd>-----END CERTIFICATE-----</kbd>.</li>
         </ul>
       </li>
     </ol>
 
     <h3>Step 4 — Configure SAML in Hugging Face</h3>
-    <ol start="11">
-      <li>Return to your organization’s <strong>Organization Settings → SSO → SAML</strong> tab in Hugging Face.</li>
-      <li>Enter the values from Okta:
+    <ol start="10">
+      <li>In Hugging Face, navigate to <strong>Organization Settings → SSO → SAML</strong>.</li>
+      <li>Enter the values obtained from Okta:
         <ul>
-          <li><strong>Sign On URL:</strong> Paste the Identity Provider Single Sign-On URL from Okta.</li>
-          <li><strong>X.509 Certificate:</strong> Paste the full certificate (including BEGIN/END markers) from Okta.</li>
+          <li><strong>Sign On URL:</strong> Paste the Identity Provider Single Sign-On URL.</li>
+          <li><strong>X.509 Certificate:</strong> Paste the certificate including BEGIN/END markers.</li>
         </ul>
       </li>
-      <li>Click <strong>Update and Test SAML Configuration</strong> to validate.</li>
-      <li>If the test is successful, toggle <strong>Enable SAML SSO</strong> to activate SSO for your organization.</li>
+      <li>Click <strong>Update and Test SAML Configuration</strong>.</li>
+      <li>If the test succeeds, toggle <strong>Enable SAML SSO</strong> to activate SSO for your organization.</li>
     </ol>
 
-    <p><strong>What happens next ?</strong> Users will still sign in to Hugging Face with their usual accounts. When they access content belonging to your organization, they’ll be prompted to authenticate via SSO through Okta.</p>
+    <hr>
+
+    <a name="sp-initiated"></a>
+    <h2>SP-Initiated SSO</h2>
+    <p>Hugging Face also supports SP-initiated Single Sign-On. To initiate login directly from Hugging Face:</p>
+    <ol>
+      <li>Navigate to <a href="https://huggingface.co/login" target="_blank">https://huggingface.co/login</a>.</li>
+      <li>Select <strong>Sign in with your Enterprise SSO</strong>.</li>
+      <li>Enter your Hugging Face <strong>organization name</strong> and click <strong>Continue</strong>.</li>
+      <li>You’ll be redirected to Okta to authenticate, and then returned to your Hugging Face organization workspace.</li>
+    </ol>
+    <p>This flow can also occur automatically when accessing restricted organization content — users will be prompted with a “Login with SSO” banner that redirects to Okta.</p>
 
     <hr>
 
-    <a name="notes"></a><h2>Notes</h2>
+    <a name="notes"></a>
+    <h2>Notes</h2>
     <ul>
-      <li>This guide covers the <strong>Standard SSO</strong> setup. For <strong>Advanced SSO</strong> (with automated user provisioning and SCIM), see 
+      <li>This setup describes <strong>Standard SSO</strong>. For <strong>Advanced SSO</strong> (with SCIM user provisioning and additional network security controls), see 
         <a href="https://huggingface.co/docs/hub/en/enterprise-hub-advanced-sso" target="_blank">Advanced SSO Documentation</a>.
       </li>
-      <li>For automated user lifecycle management via <strong>SCIM Provisioning</strong> (Enterprise Plus with Advanced SSO), see 
-        <a href="https://huggingface.co/docs/hub/en/enterprise-hub" target="_blank">SCIM and Advanced Features Overview</a>.
-      </li>
-      <li>Ensure the <strong>Organization Name</strong> and <strong>Organization ID</strong> entered in Okta exactly match those displayed in your Hugging Face SSO → SAML settings.</li>
+      <li>Ensure that the <strong>Organization Name</strong> and <strong>Organization ID</strong> used in Okta exactly match those in Hugging Face SSO settings.</li>
+      <li>After enabling SAML, access to organization resources will require authentication through Okta.</li>
+    </ul>
+
+    <hr>
+
+    <a name="support"></a>
+    <h2>Customer Support Contact</h2>
+    <p>For assistance with SSO setup or troubleshooting, please contact the Hugging Face Enterprise Support team:</p>
+    <ul>
+      <li><strong>Email:</strong> <a href="mailto:enterprise-support@huggingface.co">enterprise-support@huggingface.co</a></li>
+      <li><strong>Documentation:</strong> <a href="https://huggingface.co/docs/hub/en/enterprise-sso" target="_blank">https://huggingface.co/docs/hub/en/enterprise-sso</a></li>
     </ul>
   </div>
 </body>
 
 
 
+
 </html>