The ImportIdP program

The ImportIdP command registers an identity provider using SAML Single sign-on with the GAS/JGAS.

For usage examples, go to Usage and Configure GAS for SAML SSO.

The ImportIdP.4gl source code is provided in $FGLDIR/web_utilities/services/saml/src, and the compiled version is in the bin directory.

Syntax

fglrun ImportIdP [ options ] { url | file }
  1. options are described in Table 1.
  2. url is the URL of a SAML identity provider.
  3. file is the metadata file of a SAML identity provider.

The ImportIdP tool command line follows the convention of other Genero command line tools for both short and long versions of options.

Table 1. ImportIdP options
Option Description Usage example
-h, --help Display help with the command fglrun ImportIdP -h
-i, --import Import the IdP specified by the URL or metadata file and register it in the database for SAML. See Import option usage example.
-l, --list List all registered IdPs in the database. fglrun ImportIdP -l

See usage in Select the SAML server (Identity Provider)
-r, --remove Remove the registered entry for the specified IdP from the database. fglrun ImportIdP -r http[s]://host:port/saml/jsp/myIdPMetadata.jsp
-N, --NameIDFormat List IdPs in the database that support a specified name identifier (NameID Format). fglrun ImportIdP -N

Usage

With the Genero ImportIdP command, you can:
  • Register a SAML identity provider (IdP) in the GAS/JGAS for SAML Single sign-on.
  • List all registered IdPs
  • Remove the IdP identified by its URI.

Import option usage example

To register a SAML IdP, you must execute the ImportIdP command with the --import option and the IdP's metadata file or URL. The command must be run from the $FGLDIR/web_utilities/services/saml/bin directory:
cd $FGLDIR/web_utilities/services/saml/bin
fglrun ImportIdP --import http[s]://host:port/saml/jsp/myIdPMetadata.jsp

Where the IdP metadata file or URL is a mandatory parameter. Using a URL can require a proxy configuration in the fglprofile file.