In the service provider, e.g. Salesforce, you need to register your DualShield SSO as an external SAML Identity Provider (IdP)