Tutorial: Manage the SAML Authentication Method from the Command-line Interface – Free/paying customers info injection test

Abstract

Use this tutorial to manage SAML as an Access Server authentication method from the command-line interface.

Overview

Use this tutorial to find the necessary commands to manage SAML authentication for Access Server.

In SAML authentication mode, users authenticate with an SSO provider. We provide tutorials for some, but not all, providers:

You can also define all of the configuration parameters in the Admin Web UI under Authentication and SAML via the command line.

Set authentication mode to SAML:

./sacli --key "auth.module.type" --value "saml" ConfigPut
./sacli start

Define the IdP entity ID:

./sacli --key "auth.saml.0.idp_entityid" --value <IDP ENTITY ID> ConfigPut
./sacli start

Define the IdP sign-on endpoint:

./sacli --key "auth.saml.0.idp_signon_endpoint" --value <IDP SIGNON ENDPOINT> ConfigPut
./sacli start

Define the SAML service provider hostname (optional, if you want to set a separate hostname for SAML from the hostname used by your Admin and Client Web UIs):
```
./sacli --key "auth.saml.0.sp_hostname" --value <HOSTNAME> ConfigPut
./sacli start
```