Generic SAML 2.0 identity provider

Steps verified in the identity provider's admin console.

SAML 2.0

Connect any SAML 2.0 identity provider

1. In your identity provider create a SAML 2.0 application (service provider) and give it the KeenAuth values: Entity ID SP entity ID, Assertion Consumer Service URL ACS URL, or import SP metadata URL if it accepts metadata.
2. Configure the Name ID (a stable, non-reassignable identifier) and send e-mail, given name, family name and groups attributes.
3. Export the identity provider metadata (or entity ID, SSO URL and signing certificate).
4. In KeenAuth upload that metadata XML (Upload identity provider metadata), set the Attribute mappings, click Start a test sign-in and, once the test passes, Activate the connection.

Values in bold are shown on the connection's page in the Admin Portal, where this guide has them filled in.