Setting up the platform as an identity provider
To configure your SP in the Identity Service identity provider (IDP), contact the platform support team and provide the following information:
The service provider XML metadata
Optional: The following user attribute names that the service provider (SP) requires in the SAML assertion. If you do not provide user attribute names, default values are used.
User attribute name SAML response attribute description Default value FirstName The user's first name firstName LastName The user’s last name lastName EmailAddress The user’s email address email
When the platform support team supplies your IDP metadata, configure it in your service provider.
Optional: To synchronize user information between multiple systems for automated provisioning and deprovisioning with the SCIM (System for Cross-domain Identity Management) protocol, provide the following information to the platform support team to register SCIM information in the Identity Service. For more information on SCIM, see SCIM protocol information synchronization.
Table 4: SCIM registration information for the Identity Service
Item Description Sample value Base URL The SCIM URL that the SCIM server exposes. Ensure that the base URL follows the RFC 7644 standard. For more information, see https://datatracker.ietf.org/doc/html/rfc7644. https://example.com/v2/Users Token URL Identity Service gets token using OAUTH2 client credentials to authenticate before making SCIM APIs https://example.com/v2/oauth/token clientId OAUTH2 client ID VNAFBRKKQVFZHPGBHMGOE clientSecret OAUTH2 client secret CLIENTSECRETCLIENTSECRETCLIENTSECRETCLIENTSECRETCLIENTSECRET