Configuring the Identity Provider

SAML Integration Guide for PTT Pro and Profile Manager

Use the information from the SAML Descriptor file to configure the Identity Provider.

Click

Identity Providers

in the left pane of the Keycloak user interface.

Select

SAML v2.0

from the Add Provider drop-down menu.

Enter the redirect URL in the

Redirect URI

field. The

Redirect URI

entry is constructed as follows: https://wfc-keycloak.pttpro.zebra.com/auth/realms//broker/ /endpoint .

The <Alias>is a convenient label. Change it to an appropriate value. In this example, the alias is WFC-SAML-Auth that results in the following redirect URI: https://wfc-keycloak.pttpro.zebra.com/auth/realms/WFC-SAML-Test-Realm/ broker/WFC-SAML-Auth/endpoint

Set the

Entity Descriptor

on.

Enter the SAML descriptor URL in the

SAML entity descriptor

field.

The SAML descriptor URL pulls all the SAML endpoints, certificates etc from the SAML identity provider.

Click

Save

Configure the SAML details.

Enter the single sign-on URL in the

Single Sign-On URL Service

field.

The Single Sign-On Service URL can be copied from the

parameter in the

SAML Descriptor

field. In this example it is:

https://wfc-keycloak2.pttpro.zebra.com/auth/realms/WFC-SAML-Test-Realm/ protocol/saml

Enter the single logout service URL in the

Single Logout Service UR

field.

The Single Logout Service URL can be copied from the

parameter in the SAML Description field.

Enable

Validate Signature

Enable

HTTP-POST Binding Response

Enable

HTTP-POST Binding for AuthnRequest

Enable

HTTP-POST Binding Logout

Enable or Disable

Want AuthnRequests Signed

Click

Save