KEYCLOAK-1970

docbook/auth-server-docs/reference/en/en-US/modules/saml.xml

@@ -14,6 +14,15 @@
     </para>
     <para>
         <variablelist>
+            <varlistentry>
+                <term>Client ID</term>
+                <listitem>
+                    <para>
+                        This value must match the issuer value sent with AuthNRequests.  Keycloak will pull the issuer
+                        from the Authn SAML request and match it to a client by this value.
+                    </para>
+                </listitem>
+            </varlistentry>
             <varlistentry>
                 <term>Include AuthnStatement</term>
                 <listitem>

forms/common-themes/src/main/resources/theme/base/admin/messages/admin-messages_en.properties

@@ -164,7 +164,7 @@ add-client=Add Client
 select-file=Select file
 view-details=View details
 clear-import=Clear import
-client-id.tooltip=Specifies ID referenced in URI and tokens. For example 'my-client'
+client-id.tooltip=Specifies ID referenced in URI and tokens. For example 'my-client'.  For SAML this is also the expected issuer value from authn requests
 client.name.tooltip=Specifies display name of the client. For example 'My Client'. Supports keys for localized values as well. For example\: ${my_client}
 client.enabled.tooltip=Disabled clients cannot initiate a login or have obtain access tokens.
 consent-required=Consent Required