We are implementing SalesForce Identity Management and SF as IDP. We need to access a service provider's app using the ACS (endpoint) URL which changes based on user's company setup. For example user A will log into https://xyz.com/demo_a.com, user B will use URL https://xyz.com/demo_b.com. For SSO set up on the SP side each company will have separate setup and seperate endpoint URL. We can set up the Start URL dynamically for the connected Apps using Apex/javascript but at the same time we also need to change the ACS URL dynamically to make the SSO to work. Also which object hold this ACS URL setup - can we access that using Apex?

I have a flow embedded on a VF page and a lightning component with an iframe to the VF page. The VF page renders for me when I log into the community (Napili template), but not when I log in as an external user. I have ensured the external user has access to the VF page.

How can I expose this VF/flow to external users? Here's my lightning component:

<aura:component implements="forceCommunity:availableForAllPageTypes" access="global">
    <iframe src="https://xxx.salesforce.com/apex/my_vf_page" width="100%" height="1000px;" frameBorder="0"/>
</aura:component>

We are implementing SalesForce Identity Management and SF as IDP. We need to access a service provider's app using the ACS (endpoint) URL which changes based on user's company setup. For example user A will log into https://xyz.com/demo_a.com, user B will use URL https://xyz.com/demo_b.com. For SSO set up on the SP side each company will have separate setup and seperate endpoint URL. We can set up the Start URL dynamically for the connected Apps using Apex/javascript but at the same time we also need to change the ACS URL dynamically to make the SSO to work. Also which object hold this ACS URL setup - can we access that using Apex?