6ed5cb5249
* website/integrations: rename "Create with Provider" to "New Application" The application list page now uses a split-button labeled "New Application" instead of the old "Create with Provider" dropdown. Update all 113 integration guides to match. * website/docs: update flow, stage, and policy button labels - "Create" → "New Flow", "New Stage", "New Policy" for trigger buttons - "Finish" → "Create Flow", "Create Stage", "Create Policy" for submit - "Create and bind stage" → "New Stage" / "Bind Existing Stage" - "Create" (binding submit) → "Create Stage Binding" * website/docs: update provider button labels - "Create" → "New Provider" for trigger buttons - "Create with Provider" → "New Application" in RAC docs - "Create" → "New Property Mapping", "New RAC Endpoint", "New Prompt" for related entity creation * website/docs: update directory button labels - "Create" → "New Source" for federation/social login pages - "Create" → "New Role", submit → "Create Role" - "Create" → "New Invitation" - Policy binding submit → "Create Policy Binding" * website/docs: update endpoint device and system management button labels - "Create" → "New Endpoint Connector", "New Enrollment Token", "New Device Access Group", "New Flow" - Submit → "Create Device Access Group" - "Create" → "New Notification Rule", "New Notification Transport" - Binding submit → "Create Policy Binding" * Reorganize policy documentation * website/docs: address policy docs review feedback * post-rebase * website/docs: Reorganize policy documentation -- Revisions (#21601) * apply suggestions * Fix escaped. * Fix whitespace. * Update button label. * Fix phrasing. * Fix phrasing. * Clean up stragglers. * Format. --------- Co-authored-by: Dominic R <dominic@sdko.org>
3.1 KiB
title
| title |
|---|
| Create a SAML provider |
authentik SAML providers can be created either from scratch or by using SAML metadata exported from the Service Provider (SP). Optionally, the metadata of an authentik SAML provider can be exported back to the SP. Note, however, that many SPs do not support exporting their metadata or importing Identity Provider (IdP) metadata.
Create a SAML provider and application pair
To create a provider along with the corresponding application that uses it for authentication, navigate to Applications > Applications and click New Provider. We recommend this combined approach for most common use cases. Alternatively, you can use the legacy method to solely create the provider by navigating to Applications > Providers and clicking Create.
- Log in to authentik as an administrator, and open the authentik Admin interface.
- Navigate to Applications > Applications and click New Provider to create an application and provider pair.
- On the New application page, define the application details, and then click Next.
- Select SAML Provider as the Provider Type, and then click Next.
- On the Configure SAML Provider page, provide the configuration settings and then click Submit to create both the application and the provider.
Create a SAML provider from SP metadata (import SP metadata)
If you have exported SAML metadata from your SP, you can optionally create the authentik SAML provider by importing this metadata.
- Log in to authentik as an administrator, and open the authentik Admin interface.
- Navigate to Applications > Providers and click New Provider to create a provider.
- Select SAML Provider from Metadata as the Provider Type, and then click Next.
- On the New SAML Provider from Metadata page, provide the configuration settings along with an SP metadata file and then click Finish to create the provider.
- (Optional) Edit the created SAML provider and configure any further settings.
Export authentik SAML provider metadata
After an authentik SAML provider has been created via any of the above methods, you can access its metadata in one of two ways:
Download authentik metadata
To download the metadata of an authentik SAML provider, follow these steps:
- Log in to authentik as an administrator, and open the authentik Admin interface.
- Navigate to Applications > Providers.
- Click the name of the provider you want metadata from to open its overview tab.
- In the Related objects section, under Metadata click on Download. This will download the metadata XML file for that provider.
Access metadata tab
To view and optionally download the metadata of an authentik SAML provider, follow these steps:
- Log in to authentik as an administrator, and open the authentik Admin interface.
- Navigate to Applications > Providers.
- Click the name of the provider you want metadata from to open its overview tab.
- Navigate to the Metadata tab.
- The metadata for the provider will be shown in a codebox. You can optionally use the Download button to obtain the metadata as a file.