identity provider metadata

The OLP CLI supports the following functionality for SAML identity provider metadata validation:

validate SAML identity provider metadata

This command is available for apps with a 'IDPManager' role.

identity provider metadata validate

Validates and parses the metadata XML file to extract entity ID and single sign on URL.

olp identity provider metadata validate <template ID> <URL or path to metadata file> [command options]

Required parameters:

<template ID> A supported SAML identity provider template ID.
<URL or path to metadata file> The URL or file path to the identity provider metadata XML contents.

Optional parameters:

--credentials <path to credentials file> The name of a credentials file to use with the command. Credentials files are downloaded separately from the HERE platform portal.
--profile <profile name> The name of the credentials profile to use from the olpcli.ini file.
--quiet Displays the provider HRN.

For more information on using credentials and profiles, see Credentials setup.

Example:

The command below validates and parses the provided metadata XML file:

olp identity provider metadata validate okta ./metadata.xml

Output:

entity ID                       SSO login URL
https://www.example.com/mySso   https://here.example.com/sso/saml

Use olp identity provider create <provider name> <template ID> <URL or path to metadata file> to create SAML identity provider