Symantec Access Management

Expand all | Collapse all

Tech Tip: Can we import Metadata containing a mix of both SP and IDP information?

  • 1.  Tech Tip: Can we import Metadata containing a mix of both SP and IDP information?

    Posted Mar 22, 2017 04:00 AM

    Question

    Can we import Metadata containing a mix of both SP and IDP information?

     

     

    Answer

    No, we can not, we should have one metadata for each type of object. 

    If you want to import metadata from a 3rd party that is both SP and IDP, you would have to create 2 metadata and import them

     

    For your information the SmFedImport tool usage :

     

    To create a SAML2 Identity Provider object:

    smfedimport -type saml2idp -username <username> -password <password> -entityid <entityid>

    -name <name> [-importkeys <name>] [-silent] -input <filename>

     

    To create a SAML2 Service Provider object:

    smfedimport -type saml2sp -username <username> -password <password> -entityid <entityid>

    -domainname <name> -authurl <URL> -nameidformat (U|E|X|W|K|N|P|T)

    -nameidtype (S|U|D) -attrname <name> -dnspec <spec>

    -name name [-importkeys <name>] [-importencryptkeys <name>] [-silent] -input <filename> 

     

    KD: TEC1958754



  • 2.  Re: Tech Tip: Can we import Metadata containing a mix of both SP and IDP information?

     
    Posted Mar 22, 2017 01:56 PM