saml_identity_provider_create

Create SAML IdP
post/v1/system/identity-providers/saml

Query Parameters

silo

Request Body

Create-time identity-related parameters

Object
acs_url

service provider endpoint where the response will be sent

description
group_attribute_name

If set, SAML attributes with this name will be considered to denote a user's group membership, where the attribute value(s) should be a comma-separated list of group names.

idp_entity_id

idp's entity id

idp_metadata_source

the source of an identity provider metadata descriptor

name

Names must begin with a lower case ASCII letter, be composed exclusively of lowercase ASCII, uppercase ASCII, numbers, and '-', and may not end with a '-'. Names cannot be a UUID, but they may contain a UUID. They can be at most 63 characters long.

signing_keypair

request signing key pair

Object
private_key

request signing private key (base64 encoded der file)

public_cert

request signing public certificate (base64 encoded der file)

slo_url

service provider endpoint where the idp should send log out requests

sp_client_id

sp's client id

technical_contact_email

customer's technical contact for saml configuration

Responses

Object
acs_url

Service provider endpoint where the response will be sent

description

human-readable free-form text about a resource

group_attribute_name

If set, attributes with this name will be considered to denote a user's group membership, where the values will be the group names.

id

unique, immutable, system-controlled identifier for each resource

idp_entity_id

IdP's entity id

name

unique, mutable, user-controlled identifier for each resource

Names must begin with a lower case ASCII letter, be composed exclusively of lowercase ASCII, uppercase ASCII, numbers, and '-', and may not end with a '-'. Names cannot be a UUID, but they may contain a UUID. They can be at most 63 characters long.

public_cert

Optional request signing public certificate (base64 encoded der file)

slo_url

Service provider endpoint where the idp should send log out requests

sp_client_id

SP's client id

technical_contact_email

Customer's technical contact for saml configuration

time_created

timestamp when this resource was created

time_modified

timestamp when this resource was last modified