1. Go to Single Sign-On Settings. 2. Set Delegated Gateway URL. Note: Forces a callout to the gateway URL, even after a failure due to restrictions set in the profile (such as IP range restrictions).