diff --git a/services/web/frontend/extracted-translations.json b/services/web/frontend/extracted-translations.json
index 5e0172be50..11be0ceae2 100644
--- a/services/web/frontend/extracted-translations.json
+++ b/services/web/frontend/extracted-translations.json
@@ -1050,6 +1050,7 @@
   "revoke_invite": "",
   "right": "",
   "role": "",
+  "saml_audience_mismatch_error": "",
   "saml_auth_error": "",
   "saml_identity_exists_error": "",
   "saml_invalid_signature_error": "",
diff --git a/services/web/locales/en.json b/services/web/locales/en.json
index 240bc9e3c0..c7f05e3f0a 100644
--- a/services/web/locales/en.json
+++ b/services/web/locales/en.json
@@ -1576,6 +1576,7 @@
   "role": "Role",
   "ru": "Russian",
   "saml": "SAML",
+  "saml_audience_mismatch_error": "Sorry, the Service Provider entity ID configured in your IdP does not match the one provided in our metadata.  Please contact your administrator for more information.",
   "saml_auth_error": "Sorry, your identity provider responded with an error.  Please contact your administrator for more information.",
   "saml_authentication_required_error": "Other login methods have been disabled by your group administrator. Please use your group SSO login.",
   "saml_create_admin_instructions": "Choose an email address for the first __appName__ admin account. This should correspond to an account in the SAML system. You will then be asked to log in with this account.",
@@ -1753,7 +1754,7 @@
   "sso_error_missing_external_user_id": "The SAML attribute provided by your IdP that uniquely identifies your user is either missing or under a different name than the one you configured. Expecting: <0>__expecting__</0>",
   "sso_error_missing_firstname_attribute": "The SAML attribute that specifies the user’s first name is either missing or under a different name than the one you configured. Expecting: <0>__expecting__</0>",
   "sso_error_missing_lastname_attribute": "The SAML attribute that specifies the user’s last name is either missing or under a different name than the one you configured. Expecting: <0>__expecting__</0>",
-  "sso_error_response_already_processed": "The SAML response’s InResponseTo is invalid. This can happen if it either did’nt match that of the SAML request, or the login took too long to process and the request has expired.",
+  "sso_error_response_already_processed": "The SAML response’s InResponseTo is invalid. This can happen if it either didn’t match that of the SAML request, or the login took too long to process and the request has expired.",
   "sso_explanation": "Set up single sign-on for your group. This sign in method will be optional for group members unless Managed Users is enabled. <0>Learn more about Overleaf Group SSO</0>.",
   "sso_here_is_the_data_we_received": "Here is the data we received in the SAML response:",
   "sso_integration": "SSO integration",