SAML 2.0 SP Client

Status

Add this SP as a client in Keycloak, then click login with IdP to begin a SAML flow.

Effective configuration

Entry point (SSO URL) https://sso.qa.mpass.sa/realms/mpass/protocol/saml
Issuer saml-sp-client
Assertion Consumer Service /saml/acs
Logout callback /saml/logout
AuthnContext disabled false
Assertions signed true
IdP certificate -----BEGIN CERTIFICA…
SP certificate -----BEGIN CERTIFICA…

Workflow

  1. Generate (or reuse) an SP key pair and point the env vars to the files.
  2. Expose the metadata at /metadata to Keycloak and create a new SAML client.
  3. Update the IdP SSO URL plus signing cert in .env, restart the app, and click login.