IdP Connection Settings

Identity Provider (IdP) Metadata provides structured information used to configure and establish a connection between an IdP and a Service Provider (SP) in a SAML (Security Assertion Markup Language) environment. This Metadata includes details such as:

IdP Entity ID: A unique identifier for an IdP used to identify the IdP to a SP.
SSO URLs: Endpoints where the SP sends authentication requests.
Binding Methods: Methods used for communication between the IdP and SP.
Certificates: Used for signing and encrypting SAML assertions.

This Metadata can be provided as a file (Import Metadata), as a URL (Import from URL), or you can Manually Enter the Metadata.

Import Metadata

Select Import Metadata.
Select Browse Files, then select the Metadata file from your local folder.

Import from URL

Select Import From URL.
Enter an IdP Metadata URL, and then select Import.

Manually Enter

Select Manually Enter.
Configure the IdP Metadata settings, see IdP Metadata Settings.

Table 1. IdP Metadata Settings
Setting	Description
IdP Entity ID	The IdP unique identifier URL. URLs must begin with `https`.
SSO Binding	Select HTTP POST to send messages within the body of an HTTP POST request. Select HTTP Redirect to send encoded messages as query parameters in the URL of an HTTP GET request.
SSO URL	The endpoint where SSO authentication requests are sent. URLs must begin with `https`.
SSO Sign Request	Select SSO Sign Request to enhance SSO security. By signing the SSO request, you ensure its authenticity and integrity, confirming that it has not been tampered with.
SLO Binding	Single Logout (SLO) allows users to sign out from multiple applications or services with a single action. Select HTTP POST to send messages within the body of an HTTP POST request. Select HTTP Redirect to send encoded messages as query parameters in the URL of an HTTP GET request.
SLO URL	The endpoint where logout requests are sent to start the SLO process. This URL ensures that when a user logs out from one service, they are also logged out from all connected services. URLs must begin with `https`.
SLO Response URL	The endpoint where the Service Provider (SP) sends logout response messages after receiving a logout request from the IdP. This URL is used to confirm the completion of the SLO process. URLs must begin with `https`.
Verification Certificate	The digital certificate used to verify the authenticity and integrity of messages exchanged between the IdP and SPs. Choose an existing certificate from the drop-down list, or select Import a new Certificate.