Configuring SAML SSO for Multi-Region LangSmith Deployments

Last updated: January 12, 2026

LangSmith supports SAML Single Sign-On (SSO) authentication for enterprise deployments. If your organization operates across multiple regions (US and EU), you'll need to configure SSO separately for each region due to unique authentication endpoints.

Region-Specific SSO URLs

Each LangSmith region has distinct SSO endpoints that must be used in your Identity Provider (IdP) configuration:

US Region

  • Entity ID: https://auth.langchain.com/auth/v1/sso/saml/metadata

  • ACS URL: https://auth.langchain.com/auth/v1/sso/saml/acs

  • Base URL: smith.langchain.com

EU Region

  • Entity ID: https://eu.auth.langchain.com/auth/v1/sso/saml/metadata

  • ACS URL: https://eu.auth.langchain.com/auth/v1/sso/saml/acs

  • Base URL: eu.smith.langchain.com

Multi-Region SSO Setup Requirements

When deploying LangSmith across multiple regions, keep these important requirements in mind:

  • Each region requires a separate SSO configuration with region-specific Entity IDs and ACS URLs

  • You cannot use the same Okta, Azure AD, or other IdP application for both US and EU regions

  • Organizations are separate entities between regions, requiring individual Enterprise plan setup for each region

  • Users must be provisioned separately in each regional organization

Configuration Process

Follow these steps to set up SSO for multi-region deployments:

  1. Create Regional Organizations: Set up separate organization accounts in each desired region (US and/or EU)

  2. Configure IdP Applications: Create separate IdP applications (Okta apps, Azure AD enterprise applications, etc.) for each region using the appropriate region-specific URLs listed above

  3. Set Up SSO Per Region: Configure SSO separately for each regional organization using the corresponding IdP application

  4. Access SSO Settings: In each regional organization, navigate to Settings > Members and Roles > SSO Configuration to find the region-specific SSO login URLs

Important Considerations

  • Users will need separate SSO login URLs for each region they need to access

  • Each region operates as an independent LangSmith deployment with its own user base and data

  • Enterprise plan features and billing are managed separately for each regional organization

If you need assistance with your specific IdP configuration or have questions about Enterprise plan setup for multiple regions, contact our support team for guidance.