Creating a Federation Partner for SAML-based SSO

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Create a SAML 2.0 federation partner in RapidIdentity to register a service provider as a relying party. After the federation partner is created, RapidIdentity can issue SAML responses for users authenticating to that service provider.

Requirements
  • RapidIdentity administrator credentials
  • SAML metadata or the equivalent values (Entity ID, Assertion Consumer Service URL, certificates) from the service provider
  1. In RapidIdentity, navigate to Configuration > Security > Identity Providers > Federation Partners.
  2. Click Add Federation Partner and choose "SAML 2.0" from the pop-up menu.
  3. Click Create SAML Relying Party.
  4. In the General section, enter a Name and Description for the federation partner.
  5. Provide the service provider's SAML metadata.

    You can paste the metadata XML directly or upload a metadata file. If the service provider exposes a metadata URL, you can also configure the federation partner to retrieve metadata from that URL on a refresh interval.

  6. Configure the SSO Settings section.

    For the list of available settings, see SAML 2.0 SSO Settings and Attribute Mapping.

  7. Configure the Attribute Mapping section.

    Add each attribute the service provider requires by clicking Add New Attribute. Map each SAML attribute name to the corresponding RapidIdentity LDAP attribute.

  8. Click Save.
  9. Reload the IdP services so that the new Federation Partner is recognized.
    1. Navigate to Security > IDP Configuration.
    2. Click Trigger Service Reload.
    3. Click Trigger Web Reload.

The SAML 2.0 federation partner is created and ready to use. RapidIdentity can now authenticate users for the registered service provider.