Search Results for

    Show / Hide Table of Contents

    Connect a Service Provider using SAMLP

    You can use a SAML-P Service provider to connect to The Identity Hub.

    A. Create an App

    1. Create an App for your application. See Create an App for details.
    2. Go to the WS-Federation and SAML-P parameters section and fill out the different parameters based on the SAML-P metadata (see next steps) you have received for the app:
    3. Set the Relying Party (~ SAML-P Issuer) to reflect the entityID attribute in the EntityDescriptor node
    4. Add the SAML-P Assertion Consumer Endpoints according to the Bindings attributes of the AssertionConsumerService node as found in the SSPSSODescriptor node;
      Supported is Http-Post
    5. Set the SingleLogout Service Url based on the Location attribute of the SingleLogOutService node and its Protocol Binding
    6. Open the App Certificates node and upload the Service Provider Signing and Encryption Certificate
      6.1. Extract the dsig:X509Certificate and save it to a local .cer file on your desktop
      6.2. Upload the certificate to the App
    7. Decide if this app will Use the Tenant Token Signing certificate or not. If not: upload a separate certificate
    8. Set the Secure Hash Algorithm
    Note

    It might be that your tenant settings do not allow to use self-signed certificates.

    B. Download the SAML-P metadata to exchange with the Service Provider

    1. Navigate to the Apps list (https://www.theidentityhub.com/{tenant}/Admin/App) and select the application you are connecting.
    2. Open the SAML-P Service Providers section (you might need to scroll down to find the section) and click the download link for the Metadata document.
    3. Provide this metadata to your contact implementing the Service Provider

    Related

    Create an app: SAML-P parameters
    Used Certificates

    In This Article