diff --git a/src/pages/kb/open-source/admin-guide/env-vars-settings.md b/src/pages/kb/open-source/admin-guide/env-vars-settings.md
index 9a0efa007..068f54c23 100644
--- a/src/pages/kb/open-source/admin-guide/env-vars-settings.md
+++ b/src/pages/kb/open-source/admin-guide/env-vars-settings.md
@@ -77,9 +77,12 @@ The follow is a list of settings and what they control:
 | `REDASH_DASHBOARD_REFRESH_INTERVALS`            | Comma-separated list of integer seconds that will be allowed for dashboard refresh                                                                                                                                                                                 | 60,300,600,1800,3600,43200,86400                                                                                                           |
 | `REDASH_QUERY_REFRESH_INTERVALS`                | Comma-separated list of integer seconds that will be allowed for scheduled query refresh                                                                                                                                                                           | 60, 300, 600, 900, 1800, 3600, 7200, 10800, 14400, 18000, 21600, 25200, 28800, 32400, 36000, 39600, 43200, 86400, 604800, 1209600, 2592000 |
 | `REDASH_PASSWORD_LOGIN_ENABLED`                 | Toggle to allow password login. Often disabled if Google Login, SAML, LDAP, or REMOTE_USER_LOGIN are enabled.                                                                                                                                                      | true                                                                                                                                       |
-| `REDASH_SAML_METADATA_URL`                      |                                                                                                                                                                                                                                                                    |                                                                                                                                            |
-| `REDASH_SAML_ENTITY_ID`                         |                                                                                                                                                                                                                                                                    |                                                                                                                                            |
-| `REDASH_SAML_NAMEID_FORMAT`                     |                                                                                                                                                                                                                                                                    |                                                                                                                                            |
+| `REDASH_SAML_AUTH_TYPE`                         | static/dynamic login type                                                                                                                                                                                                                                          |                                                                                                                                            |
+| `REDASH_SAML_ENTITY_ID`                         | (static & dynamic) redash instance URL                                                                                                                                                                                                                             |                                                                                                                                            |
+| `REDASH_SAML_METADATA_URL`                      | (dynamic) a XML metadata URL provided by your IDP                                                                                                                                                                                                                  |                                                                                                                                            |
+| `REDASH_SAML_NAMEID_FORMAT`                     | (dynamic) NameID format noted in your IDP's XML metadata                                                                                                                                                                                                           |                                                                                                                                            |
+| `REDASH_SAML_SSO_URL`                           | (static) a URL at your IDP where SAML users will be redirected                                                                                                                                                                                                     |                                                                                                                                            |
+| `REDASH_SAML_X509_CERT`                         | (static) a X509 certificate held by your IDP                                                                                                                                                                                                                       |                                                                                                                                            |
 | `REDASH_DATE_FORMAT`                            | Moment.js format to be used throughout the web application                                                                                                                                                                                                         | DD/MM/YY                                                                                                                                   |
 | `REDASH_JWT_LOGIN_ENABLED`                      |                                                                                                                                                                                                                                                                    | false                                                                                                                                      |
 | `REDASH_JWT_AUTH_ISSUER`                        |                                                                                                                                                                                                                                                                    |                                                                                                                                            |