Bypass SAML mode
Parent: Atlas Federated Authentication · Published reference · snapshot 2026-10-15
↓ Facts as markdownall context files
Depth-first rabbithole dossier for Bypass SAML mode; source-anchored research pack.
These notes link each claim to its source. Some citations identify archived research reports that are no longer hosted on this site. A published reference means the content is available; it does not certify independent review or accuracy.Read the editorial policy and follow the sources before relying on a claim.
Structure and components
- [low] To sign in to Atlas using Bypass SAML Mode, you must use the Bypass SAML Mode URL for your IdP and a username that contains the domain you mapped to your IdP, which you have used to sign in to Atlas or Cloud Manager before configuring Federated Authentication. Sources: https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md [source]
Facts and statements
- [low] Bypass SAML Mode provides a login URL that bypasses federated authentication, allowing users to authenticate with their Atlas credentials. Sources: https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md [source]
- [low] Each Bypass SAML Mode URL is associated with an individual IdP and corresponds to that IdP's Login URL. Sources: https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md [source]
- [low] Bypass SAML Mode is enabled by default, but you may want to disable it as a security measure once you are confident that you have properly configured your Federated Authentication. Sources: https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md [source]
- [medium] Before testing, copy and save the Bypass SAML Mode URL for your IdP to bypass federated authentication in the event that you are locked out of your Atlas organization. Sources: https://www.mongodb.com/docs/atlas/security/manage-domain-mapping.md, https://www.mongodb.com/docs/atlas/security/federated-auth-azure-ad.md, https://www.mongodb.com/docs/atlas/security/federated-auth-okta.md [source]
- [high] To disable Bypass SAML Mode, click Disable in the confirmation dialog box or click the Bypass SAML Mode toggle switch to OFF. Sources: https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md, https://duo.com/docs/sso-mongodb-atlas-uia [source]
- [low] You can bypass the Atlas log in page by navigating directly to your IdP's Login URL, which takes you directly to your IdP to authenticate. Sources: https://www.mongodb.com/docs/atlas/security/manage-domain-mapping.md [source]
- [low] The SAML trust model requires certificate exchange over trusted channels during setup and doesn't require CA-signed certificates, while during federated authentication, all traffic between MongoDB Atlas and the browser runs over TLS using a CA-signed certificate. Sources: https://www.mongodb.com/docs/atlas/security/manage-federated-auth.md [source]
- [low] Currently, any users can use the bypass SSO URL. Sources: https://feedback.mongodb.com/ideas/CUSTOMER-I-8930 [source]
Related concepts
- Bypass — is a part of Bypass SAML mode
- SAML — is a part of Bypass SAML mode
- mode — is a part of Bypass SAML mode
Children
- No children recorded.