Select the SAML server (Identity Provider)

Follow these steps to specify the SAML server a Genero application must use as its Identity Provider (IdP).

Before you begin, determine the EntityID name for the IdP server you wish to specify. Use the ImportIdP program with the --list option to identify the EntityID name.

fglrun ImportIdP --list

Complete this procedure to specify which SAML server a Genero application must use as its Identity Provider (IdP).

If the IDP element is not set in the DELEGATE element of the application configuration file, the Genero Application Server will retrieve the unique registered IdP. It will raise an error if more than one IdP is registered.

Add an IDP element as a child of the SAML DELEGATE element in the application configuration (xcf) file. Enter the EntityID name in the IDP tag.

<?xml version="1.0"?>
<APPLICATION Parent="defaultgwc"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xsi:noNamespaceSchemaLocation="http://www.4js.com/ns/gas/4.01/cfextwa.xsd">
  <EXECUTION>
    <PATH>$(res.path.qa)/applications/myapp</PATH>
    <MODULE>App.42r</MODULE>
    <DELEGATE service="services/SAMLServiceProvider">
      <IDP>http://idp.4js.com</IDP>
    </DELEGATE>
  </EXECUTION>
</APPLICATION>

The Genero Application Server uses the specified IdP as its single sign-on (SSO) identity provider.