Contact UsTry it for free
© 2026 Direct Cursus Technology L.L.C.

Creating a SAML app in Yandex Identity Hub for integration with Sentry

Written by
Updated at March 18, 2026

Sentry is a real-time error monitoring and tracking platform for applications allowing developers to quickly detect, diagnose, and fix failures and performance issues.

To allow your organization's users to authenticate in Sentry via SAML SSO, create a SAML app in Identity Hub and configure it in Identity Hub and in Sentry.

SAML apps can be managed by users with the organization-manager.samlApplications.admin role or higher.

Note

For SAML integration, your Sentry instance must have a public domain and a valid SSL certificate in place.

For your organization's users to be able to access Sentry:

  1. Create an app in Identity Hub.
  2. Set up the integration.
  3. Make sure the application works correctly.

Create an app in Identity Hub

  1. Log in to Yandex Identity Hub.
  2. In the left-hand panel, select Apps.
  3. In the top-right corner, click Create application and in the window that opens:

    1. Select the SAML (Security Assertion Markup Language) single sign-on method.

    2. In the Name field, specify a name for your new app: sentry-app.

    3. Optionally, in the Description field, enter a description for the new app.

    4. Optionally, add labels:

      1. Click Add label.
      2. Enter a label in key: value format.
      3. Press Enter.

    5. Click Create application.

  4. Save the Metadata URL value, you will need it at the next step.

Set up the integration

Set up the SAML application in Yandex Identity Hub

Find the organization slug

To set up endpoints, you need the organization slug, which is set to sentry by default. To find the slug of your organization:

  1. Log in to Sentry.
  2. In the left-hand menu, click Settings.
  3. On the Organization tab, select General Settings.
  4. Copy the Organization Slug field value.

Set up service provider endpoints

  1. Log in to Yandex Identity Hub.
  2. In the left-hand panel, select Apps and then, the SAML app.
  3. At the top right, click Edit and in the window that opens:
    1. In the **SP EntityID ** field, paste the <sentry_instance_address>/saml/metadata/<organization_slug>/ value.
    2. In the ACS URL field, paste the <sentry_instance_address>/saml/acs/<organization_slug>/ value.
    3. Optionally, in the SP Logout URL field, paste the <sentry_instance_address>/saml/sls/<organization_slug>/ value.
    4. Click Save.

Configure authentication on the Sentry side

  1. Log in to Sentry as a user with the organization owner permissions.
  2. In the left-hand menu, click Settings.
  3. On the Organization tab, select Auth.
  4. From the list of providers, select SAML2.
  5. Click Configure.
  6. In the Metadata URL field, enter the metadata file address you copied earlier.
  7. Click Get metadata.
  8. Under Map Identity Provider Attributes, fill out the following fields:
    • In the IdP User ID field, enter fullname.
    • In the User Email field, enter emailaddress.
    • Optionally, in the First Name field, enter givenname.
    • Optionally, in the Last Name field, enter surname.
  9. Click Save Settings.

Add a user

For your organization's users to be able to authenticate in Sentry with Identity Hub's SAML app, you need to explicitly add these users and/or user groups to the SAML application.

Note

Users and groups added to a SAML application can be managed by a user with the organization-manager.samlApplications.userAdmin role or higher.

  1. Add users to the application:

    1. Log in to Yandex Identity Hub.
    2. In the left-hand panel, select Apps and select the required app.
    3. Navigate to the Users and groups tab.
    4. Click Add users.
    5. In the window that opens, select the required user or user group.
    6. Click Add.

Make sure your application works correctly

To make sure both your SAML app and Sentry integration work correctly, authenticate to Sentry as one of the users you added to the app. Proceed as follows:

  1. In your browser, navigate to your Sentry instance's address.
  2. On the authentication page, click Login with SAML2.
  3. On the Yandex Cloud authentication page, enter the user email address and password. The user or group they belong to must be added to the application. The user must also have their email address specified.
  4. Make sure you have successfully authenticated in Sentry.
Previous
OpenVPN Access Server
Next
Using OAuth2 Proxy for applications not supporting SSO