Service Provider Metadata

Provide the module metadata to IdP:

• Service Provider Metadata is an XML document that contains the necessary information, such as the Entity ID, ACS URL, X.509 Certificate, and supported SAML bindings for interaction with the Identity Provider. The Service Provider Metadata tab of the module allows you to provide metadata in three different formats, as supported by the IdP.

• For configuring miniOrange on your IdP, you have two options :
  • URL Format: https://{your_base_url}/saml_metadata
  • Using XML File: Download the file using the Download XML Metadata button.
  • Manual: Below is a quick overview of the SAML attributes that should be configured on the Identity Provider to establish trust for authentication. You can copy the attribute values and provide them to the IdP.

Additional Settings:

• Change SP Base URLs (Optional)
  • On the same page below the SP metadata, there is an option to change the base URL and the Entity ID of the Service Provider. Updating any of these will also update URLs in the metadata so you need to re-configure SP metadata in IdP again.
    • SP Base URL: All SAML endpoints of the service provider are generated based on the base URL of the site. If a different base URL is needed, use this option.
    • SP Entity ID: Entity ID used by the Identity Provider to uniquely identify the service provider. Use this option if you want a different value than the default value.
• Authentication Security
  • This option secures authentication by signing requests and requiring signed assertions, ensuring data integrity and preventing tampered or untrusted responses.
    • Sign Authentication Requests: This ensures that all authentication requests sent by the module are signed.
    • Require Signed Assertions: If you select True for this option, then a signed assertion is required from the IdP.
• Metadata organization details (Optional)
  • This section allows you to customize the organization details in the Service Provider metadata. Updating these details will also update the SP metadata, so you will need to reconfigure the SP metadata in the IdP

Configurable Options:

1. Organization Name
2. Organization display name
3. Organization URL
4. Technical contact person name
5. Technical contact person email
6. Support contact person name
7. Support contact email

 Back to top