FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    Where to put SAML metadata if FA is acting as IDP?

    Scheduled Pinned Locked Moved Unsolved
    Q&A
    2
    4
    1.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fred.fred
      last edited by

      We are on FA V1.26.1.

      We are trying to do a demo for our business of FA as identity provider (IDP) to an external service provider (SP).

      This is the SAML test we are using: https://samltest.id/

      We are able to make the SP initiated SSO work.

      But to make IDP initiated work, we need to upload the SP's metadata.

      However, this post comment from @dan mentions that FA does not allow upload of metadata

      So now how and where do we put the SP's metadata?

      Is it a lambda? The application's SAML section does not seems to have a pop out or section to put the SP info in.

      ded6b00f-e81c-4f3c-998f-133d55a9be3d-image.png

      Thanks for any help.

      danD 1 Reply Last reply Reply Quote 0
      • danD
        dan @fred.fred
        last edited by

        @fred-fred

        Hiya, are you using the IdP initiated SAML Identity Provider, as documented here: https://fusionauth.io/docs/v1/tech/identity-providers/samlv2-idp-initiated/ ?

        --
        FusionAuth - Auth for devs, built by devs.
        https://fusionauth.io

        F 1 Reply Last reply Reply Quote 0
        • F
          fred.fred @dan
          last edited by

          @dan I'll take a look, but I thought those directions did not pertain to us because I want our FA instance to be the IDP that the user clicks a link from. For example, we have a page out on the internet, the user want to get to some SAML SP, which our FA is the IDP for, so they click this link:

          https://myFAurl.com/samlv2/login/zzzz-222-111-000-yyy

          As provided in the FA SAML v2 Integration details

          But it looks like this is the only place to enter SP metadata info, correct?

          danD 1 Reply Last reply Reply Quote 0
          • danD
            dan @fred.fred
            last edited by

            @fred-fred said in Where to put SAML metadata if FA is acting as IDP?:

            But it looks like this is the only place to enter SP metadata info, correct?

            I'm not sure I understand what you mean.

            --
            FusionAuth - Auth for devs, built by devs.
            https://fusionauth.io

            1 Reply Last reply Reply Quote 0
            • First post
              Last post