SAML Descriptor File

A sample SAML Descriptor file is shown below. You can also view a sample file at the Sample Descriptor File link.

You can access the Descriptor file from the Keycloak user interface. Navigate to the

Realm Settings

General

tab. Click on the

SAML 2.0 IdP Metadata

field under

Endpoints

to reveal the descriptor file.)

In the example Descriptor file below, the following lines contain the information needed to configure the ACS service.

The tag
<dsig:x509Certificate>
on line 10 contains the x509 certificate to import into the ACS service to provide access to the IdP.
The tag
<SingleLogoutService>
on line 15 contains the URL to be copied into the SAML Single Logout Service URL in the ACS service.
The tag
<SingleSignOnService>
on line 29 contains the URL to copy into the SAML Single Sign-On Service URL in the ACS service.