SAML: Configure SP's without Metadata

[nynymike]

Some SP's have no metadata--they just publish the certificate and ACS url. Currently we make the admin create an XML file and upload it. It would be better if we create a new SP type called manual, and display a form where the admin could enter the information. Perhaps we can render an XML file?

[malotian]

Kindly refer https://www.samltool.com/sp_metadata.php, and create a similar form

[yurem]

We have conflict here in another issue about this functionality.
@nynymike Is this functionality needed?

[nynymike]

These are two different features. "Generate SP" metadata rendered Shib SP config... we don't need that anymore. This feature is about giving the IDP admin an alternative to uploading SP metadata. If we have a form, we can ask for the info needed and just generate the metadata for the customer.

[yurem]

Thank you for explanation, now the difference is clear. @shekhar16 we also need to check if we cleaned up java code and velocity template(s) in issue (#2043). I think we just removed Generate SP metadata from GUI

[nynymike]

That name was wrong... it wasn't actually SP metadata... it was SP Config. But what we need for this option is a form that enables the IDP admin to enter the entityID, the public cert of the SP, and the ACS endpoint URL. I might be missing something, but I think that's all we really need for a basic SAMLSSO config. @uprightech would know better.

[shekhar16]

[shekhar16]

@MohitMaliFtechiz please close this ticket

[shekhar16]

@MohitMaliFtechiz this issue already fixed and we tested it on 4.4.1 also,
closing it.