Menu
Onegini docs
Google Custom Search
Search term
Search
Introduction
1.
Requirements
1.1.
Core extension compatibility
2.
Quick start
2.1.
Installation
2.2.
Setup
3.
Configuration
3.1.
Properties
3.2.
Persistable properties
3.3.
Administrator Users
3.4.
Setting up Redis
4.
Extensions
4.1.
System architecture
4.2.
Extension points
4.2.1.
Update Profile attributes
4.2.2.
Person Search pre-process
4.3.
Compatibility
4.4.
Applications setup
4.5.
Templates
4.6.
Hooks
5.
Administration
5.1.
Action Tokens
5.2.
Configure account link
5.3.
Content Security Policy
5.4.
Manage content pages
5.5.
Feature Management
5.6.
Identity providers
5.7.
Redirect url whitelist
5.8.
User Profile Attributes
6.
API Reference
6.1.
REST Guidelines
6.2.
APIs basic auth credentials
6.3.
Password Encryption
6.3.1.
Java
6.3.2.
C#
6.3.3.
PHP
6.4.
Person API
6.5.
Credential API
6.6.
Events API
6.7.
Statistics API
6.8.
Configuration API
6.9.
Session API
6.10.
Storage API
6.11.
Import API
6.12.
Operations API
7.
Topic guides
7.1.
Authentication
7.1.1.
Action token login
7.1.2.
Configuring QR Code Login Method
7.1.3.
Google Authenticator
7.1.4.
Mobile Login
7.1.5.
Mobile Step-up authentication
7.1.6.
Step-up authentication
7.1.7.
Identity assurance level
7.2.
Identity Providers
7.2.1.
Username and Password
7.2.2.
Google
7.2.3.
Facebook
7.2.4.
SAML
7.2.4.1.
Configure SAML Keys
7.2.5.
OpenID Connect
7.2.5.1.
Configure JWT Keys
7.2.5.2.
OIDC Logout
7.2.6.
DigiD
7.2.7.
eIDAS
7.2.8.
Sign in with Apple
7.2.9.
itsme
7.2.10.
Azure AD B2C
7.3.
Login with action token link
7.4.
Authentication post process actions
7.5.
Attribute mappings
7.6.
Attributes lifecycle
7.7.
Brand-specific messages with locale variant code
7.8.
Connect IdP with extension over HTTPS
7.9.
Create person with Person API
7.10.
Custom attributes
7.11.
Custom email validation
7.12.
Configure reCAPTCHA v2
7.13.
Clean up events
7.14.
Email notifications
7.15.
Flow Context
7.16.
Automatic Migration
7.17.
Automatic SignUp
7.18.
Profile management with Person APIs
7.19.
Returning SAML authentication information to Service Provider
7.20.
Sign up without invitation validation
7.21.
Shared Application Config
7.22.
Obtaining session information via API
7.23.
Person activation
7.24.
Persons partitioning
7.25.
Identity Providers partitioning
7.26.
Sending events to AWS event bridge
7.27.
Token Server
7.28.
Transforming Profile Attributes
7.29.
Messages resolution order
7.30.
Person pre creation process
7.31.
Using custom parameters from the SAML authentication request
7.32.
Import users to CIM
7.33.
QR Device Registration
8.
Customise Screens
8.1.
Links
8.2.
Text
8.3.
Analytics
9.
SAML Authentication
9.1.
Custom SAML attributes
9.2.
Authentication level
9.3.
Cookie based authentication
9.4.
Inline login
9.5.
Optional authentication
9.6.
Enhanced Client Proxy authentication (ECP)
9.7.
Login with social identity provider
9.8.
Extension custom parameters
10.
Release notes
10.1.
7.x
10.2.
6.x
10.3.
5.x
10.4.
4.x
10.5.
3.x
10.6.
2.x
Onegini IDP
SAML Authentication
This chapter describes details of handling SAML authentication in Onegini IdP.
© Onegini