Update index.html

index.html

@@ -23,8 +23,8 @@
         <ul>
           <li><p>Your organization must be on an <strong>Enterprise</strong> or <strong>Enterprise Plus</strong> plan to enable SAML-based SSO.</p></li>
           <li><p>You must have administrator access to both your Okta organization and your Hugging Face Enterprise Hub organization.</p></li>
-          <li><p>For details about Hugging Face's SSO options, visit the 
-          <a href="https://huggingface.co/docs/hub/enterprise/sso" target="_blank">Hugging Face Enterprise Documentation</a>.</p></li>
+          <li><p>For details about Hugging Face’s SSO options, visit the official documentation:  
+          <a href="https://huggingface.co/docs/hub/en/enterprise-sso" target="_blank">Hugging Face Enterprise SSO Documentation</a>. :contentReference[oaicite:1]{index=1}</p></li>
         </ul>
       </div>
     </div>
@@ -40,7 +40,7 @@
     <a name="features"></a><h2>Supported Features</h2>
     <p>The Okta / Hugging Face Enterprise Hub SAML integration supports the following:</p>
     <ul>
-      <li><strong>IdP-initiated SSO:</strong> Users can sign in to Hugging Face from their Okta dashboard via the Hugging Face app tile.</li>
+      <li><strong>IdP-initiated SSO and SP-initiated SSO:</strong> Users can initiate authentication either from the identity provider (IdP) or from the service provider (Hugging Face). :contentReference[oaicite:2]{index=2}</li>
     </ul>
     <hr>
 
@@ -48,65 +48,66 @@
 
     <h3>Step 1: Add the Hugging Face App from Okta Integration Network (OIN)</h3>
     <ol>
-      <li><p>Sign in to your <strong>Okta Admin Dashboard</strong>.</p></li>
-      <li><p>Navigate to <strong>Applications</strong> &gt; <strong>Applications</strong>.</p></li>
-      <li><p>Click <strong>Browse App Catalog</strong>.</p></li>
-      <li><p>Search for <strong>Hugging Face</strong>.</p></li>
-      <li><p>Select the <strong>Hugging Face</strong> application.</p></li>
-      <li><p>Click <strong>Add Integration</strong>.</p></li>
+      <li>Sign in to your Okta Admin Dashboard.</li>
+      <li>Go to Applications → Browse App Catalog.</li>
+      <li>Search for and select the application named <strong>Hugging Face</strong>.</li>
+      <li>Click <strong>Add Integration</strong>.</li>
     </ol>
 
     <h3>Step 2: Configure the Hugging Face App in Okta</h3>
-    <ol start="7">
-      <li><p>On the <strong>General Settings</strong> page, enter:</p>
+    <ol start="5">
+      <li>On the General Settings page, enter:
         <ul>
-          <li><strong>Application label:</strong> <kbd>Hugging Face</kbd> (or customize as needed)</li>
+          <li><strong>Application label:</strong> <kbd>Hugging Face</kbd></li>
           <li><strong>Organization Name:</strong> Your Hugging Face organization name</li>
           <li><strong>Organization ID:</strong> Your Hugging Face organization ID</li>
         </ul>
-        <p><em>Where to find these values:</em> In Hugging Face, go to your organization settings &rarr; <strong>SSO</strong> tab &rarr; <strong>SAML</strong> sub-tab. You will see both your Organization Name and Organization ID.</p>
-        <p style="border:1px dashed #ccc;padding:8px;margin:10px 0;"><em>Screenshot placeholder — insert your screenshot of the Hugging Face SSO &rarr; SAML page here.</em></p>
+        <p><em>Where to find these values:</em> In Hugging Face go to <strong>Organisation Settings → SSO → SAML</strong>. You will see both the Organization Name and the Organization ID.</p>
+        <p><img src="/static/images/hf-sso-saml-screenshot.png" alt="Hugging Face SSO SAML screenshot" style="max-width:100%;height:auto;"></p>
       </li>
-      <li><p>Click <strong>Next</strong>, review the <strong>Sign-On Options</strong> (username format should be <kbd>Email</kbd>), then click <strong>Done</strong> to create the app.</p></li>
-      <li><p><strong>Important:</strong> Ensure the administrator performing these steps is <strong>assigned</strong> to the Hugging Face application in Okta (via the <strong>Assignments</strong> tab), otherwise they won't be able to complete the test later.</p></li>
+      <li>Click <strong>Next</strong>, review the Sign-On Options (make sure username format is <kbd>Email</kbd>), then click <strong>Done</strong>.</li>
+      <li><strong>Important:</strong> Make sure the administrator performing these steps is assigned to the Hugging Face application in Okta via the Assignments tab.</li>
     </ol>
 
     <h3>Step 3: Copy SAML Configuration from Okta</h3>
-    <ol start="10">
-      <li><p>From the Hugging Face app in Okta, open the <strong>Sign On</strong> tab.</p></li>
-      <li><p>Scroll to the <strong>SAML 2.0</strong> section and click <strong>View SAML setup instructions</strong> (or check <strong>Metadata details</strong>).</p></li>
-      <li><p>Copy the following values:</p>
+    <ol start="8">
+      <li>In the Hugging Face app in Okta, open the <strong>Sign On</strong> tab.</li>
+      <li>Locate the SAML 2.0 section and click <strong>View SAML Setup Instructions</strong> (or go to Metadata Details).</li>
+      <li>Copy the following values:
         <ul>
           <li><strong>Identity Provider Single Sign-On URL</strong></li>
-          <li><strong>X.509 Certificate</strong> (full certificate text between <kbd>-----BEGIN CERTIFICATE-----</kbd> and <kbd>-----END CERTIFICATE-----</kbd>)</li>
+          <li><strong>X.509 Certificate</strong> — copy the full certificate including <kbd>-----BEGIN CERTIFICATE-----</kbd> and <kbd>-----END CERTIFICATE-----</kbd>.</li>
         </ul>
       </li>
     </ol>
 
     <h3>Step 4: Configure SAML in Hugging Face</h3>
-    <ol start="13">
-      <li><p>Return to your organization's <strong>SSO</strong> settings in Hugging Face and select the <strong>SAML</strong> tab.</p></li>
-      <li><p>Enter the values from Okta:</p>
+    <ol start="11">
+      <li>Return to your organization's <strong>Organisation Settings → SSO → SAML</strong> tab in Hugging Face.</li>
+      <li>Enter the values from Okta:
         <ul>
-          <li><strong>Sign On URL:</strong> Paste the <strong>Identity Provider Single Sign-On URL</strong> from Okta.</li>
-          <li><strong>X.509 Certificate:</strong> Paste the full certificate text from Okta.</li>
+          <li><strong>Sign On URL:</strong> Paste the Identity Provider Single Sign-On URL from Okta.</li>
+          <li><strong>X.509 Certificate:</strong> Paste the full certificate text (including the BEGIN/END markers) from Okta.</li>
         </ul>
       </li>
-      <li><p>Click <strong>Update and Test SAML Configuration</strong> to validate.</p></li>
-      <li><p>If the test is successful, toggle <strong>Enable SAML SSO</strong> to enforce SSO for your organization.</p></li>
+      <li>Click <strong>Update and Test SAML Configuration</strong> to validate the setup.</li>
+      <li>If the test is successful, toggle <strong>Enable SAML SSO</strong> to enforce the SSO for your organization.</li>
     </ol>
 
-    <p><strong>What happens next?</strong> Once SSO is enabled, users will continue to sign in to the platform with their usual Hugging Face credentials. However, when they attempt to access content that belongs to your organization, they will be prompted to authenticate via SSO through Okta.</p>
+    <p><strong>What happens next?</strong> Users will continue signing in with their usual Hugging Face account credentials. But when they access content belonging to your organization, they will be prompted to authenticate via SSO through Okta.</p>
 
     <hr>
 
     <a name="notes"></a><h2>Notes</h2>
     <ul>
-      <li><p>This guide covers <strong>Standard SSO</strong>. For <strong>Advanced SSO</strong> capabilities, see the official docs: <a href="https://huggingface.co/docs/hub/enterprise/sso" target="_blank">Advanced SSO</a>.</p></li>
-      <li><p>For automated user lifecycle management via <strong>SCIM provisioning</strong> (Enterprise Plus with Advanced SSO), see: <a href="https://huggingface.co/docs/hub/enterprise/scim" target="_blank">SCIM Provisioning</a>.</p></li>
-      <li><p>Ensure the <strong>Organization Name</strong> and <strong>Organization ID</strong> entered in Okta exactly match the values shown in your Hugging Face SSO &rarr; SAML settings.</p></li>
+      <li>This guide covers the <strong>Standard SSO</strong> setup. For <strong>Advanced SSO</strong> (with automated user provisioning, SCIM, global enforcement) see:  
+          <a href="https://huggingface.co/docs/hub/en/enterprise-hub-advanced-sso" target="_blank">Advanced SSO Documentation</a>. :contentReference[oaicite:3]{index=3}</li>
+      <li>For automated user lifecycle management via <strong>SCIM provisioning</strong> (Enterprise Plus with Advanced SSO), see:  
+          <a href="https://huggingface.co/docs/hub/en/enterprise-hub" target="_blank">SCIM & Advanced Features Overview</a>. :contentReference[oaicite:4]{index=4}</li>
+      <li>Ensure that the <strong>Organization Name</strong> and <strong>Organization ID</strong> entered in Okta exactly match the values shown in your Hugging Face SSO → SAML settings.</li>
     </ul>
   </div>
 </body>
 
+
 </html>