Page Comparison

Security Assertion Markup Language (SAML) is a login standard that helps users access applications based on sessions in another context. It’s a single sign-on (SSO) login method offering more secure authentication (with a better user experience) than usernames and passwords.

Image Removed

Image Added

• Login Page

  • A url provided by the SAML idenitty provider. When the login process is started, the user is forwarded to this url.

• IDP Entity ID

  • An identifier provided by the SAML identity provider. Usually this is a URL that belongs to the SAML idenity provider.

• Certificate

  • An X509 certifcate in PEM format, provided by the SAML identity provider.

• Attribute Display Name (optional)

  • Name of the user attribute that holds the display name.

• Attribute Email (optional)

  • Name of the user attribute that holds the email address.

• Attribute Role (optional)

  • Name of the user attribute that holds the user's role. This allows using the SAML idenity provider to assign user roles.

• Attribute Role Admin Value (optional)

  • If attributeRole is configured and that user attribute holds the value configured in attributeRoleAdminValue, the user will be logged in as global admin.

• SP Entity ID

  • Copy this value to the SAML identity provider. It is used to tie SAML login responses to this specific application.

• Login Response Url

  • Copy this URL to the SAML identity provider. This is where the SAML identity provider should redirect to on successful login.