The Assertion · Experimental
SAML service provider setup
Setup preview: live sign-in is not available yet.
SAML capability: not qualified
1. Configure your IdP with these SP values
These values are fixed for this environment. Copy them into your IdP configuration.
Loading SP values…
The supported experimental flow requires an unsigned HTTP-Redirect AuthnRequest to an HTTPS IdP SSO endpoint, an HTTPS HTTP-POST ACS, and a directly signed Response. Signed requests, IdP-initiated SSO, encrypted assertions, assertion-only signatures, multiple signing keys, and logout are unsupported in this beta.
Planned first beta compatibility profile (not active in this setup preview):
The directly signed Response uses an RSA-SHA256 signature, SHA-256 digest, and exclusive XML canonicalization without comments. It requires one currently valid RSA X.509 signing certificate with a key of 2048–4096 bits and digital-signature KeyUsage when present.
Local development uses HTTP on numeric loopback for the SP ACS. Hosted use requires HTTPS for the SP ACS and IdP SSO endpoint.
2. Import IdP metadata
Paste XML or choose a .xml file up to 256 KiB. Nothing is fetched from a metadata URL.