keycloak-scim/docs/documentation/server_admin/topics/clients/saml/proc-using-an-entity-descriptor.adoc

24 lines
822 B
Text
Raw Normal View History

2020-10-28 20:20:38 +00:00
[id="proc-using-an-entity-descriptors_{context}"]
= Using an entity descriptor to create a client
[role="_abstract"]
2020-10-28 20:20:38 +00:00
Instead of registering a SAML 2.0 client manually, you can import the client using a standard SAML Entity Descriptor XML file.
The Client page includes an *Import client* option.
2020-10-28 20:20:38 +00:00
.Add client
image:images/import-client-saml.png[Import SAML client]
2020-10-28 20:20:38 +00:00
.Procedure
. Click *Browse*.
2020-10-28 20:20:38 +00:00
. Load the file that contains the XML entity descriptor information.
. Review the information to ensure everything is set up correctly.
Some SAML client adapters, such as _mod-auth-mellon_, need the XML Entity Descriptor for the IDP. You can find this descriptor by going to this URL:
[source, subs="attributes"]
----
root{kc_realms_path}/{realm}/protocol/saml/descriptor
2020-10-28 20:20:38 +00:00
----
where _realm_ is the realm of your client.