vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/iam/umn/iam_08_0003.html
Wei, Hongmin 25e8bdf969 IAM UMN 0815 Version 
Reviewed-by: Belejkanic, Lukas <lukas.belejkanic@t-systems.com>
Co-authored-by: Wei, Hongmin <weihongmin1@huawei.com>
Co-committed-by: Wei, Hongmin <weihongmin1@huawei.com>
2023-08-21 13:27:54 +00:00

146 lines
24 KiB
HTML
Raw Blame History

<a name="iam_08_0003"></a><a name="iam_08_0003"></a>
<h1 class="topictitle1">Step 1: Create an IdP Entity</h1>
<div id="body1598524160363"><p id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_p69242055193319">To establish a trust relationship between an enterprise IdP and the cloud platform, upload the metadata file of the cloud platform to the enterprise IdP, and then create an IdP entity and upload the metadata file of the enterprise IdP on the IAM console.</p>
<div class="section" id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_section56174541186"><h4 class="sectiontitle">Prerequisites</h4><p id="iam_08_0003__en-us_topic_0272447057_p851129135213">You have read the documentation of the enterprise IdP or have understood how to use the enterprise IdP. Configurations of different enterprise IdPs differ greatly, so they are not described in this document. For details about how to obtain the enterprise IdP's metadata file and how to upload the metadata file of the cloud platform to the enterprise IdP, see the IdP help documentation.</p>
</div>
<div class="section" id="iam_08_0003__en-us_topic_0272447057_section122531649172219"><h4 class="sectiontitle">Establishing a Trust Relationship Between the Enterprise IdP and the Cloud Platform</h4><p id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_p99941747792">The metadata file of the cloud platform needs to be configured in the enterprise IdP to establish a trust relationship between the two systems.</p>
<ol id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_ol15379454241"><li id="iam_08_0003__en-us_topic_0272447057_li11727843241"><span>Download the metadata file of the cloud platform.</span><p><ul id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0191538776_ul20692706154120"><li id="iam_08_0003__en-us_topic_0272447057_li169321683509">Web SSO: Visit <a href="https://auth.otc.t-systems.com/authui/saml/metadata.xml" target="_blank" rel="noopener noreferrer">https://auth.otc.t-systems.com/authui/saml/metadata.xml</a>, right-click on the page, choose <strong id="iam_08_0003__en-us_topic_0272447057_b193531132125716">Save As</strong>, and set a file name, for example, <strong id="iam_08_0003__en-us_topic_0272447057_b1535323217574">websso-metadata.xml</strong>.</li><li id="iam_08_0003__en-us_topic_0272447057_li17391152055010">SSO via API calling: Visit <a href="https://iam.eu-de.otc.t-systems.com/v3-ext/auth/OS-FEDERATION/SSO/metadata" target="_blank" rel="noopener noreferrer">https://iam.eu-de.otc.t-systems.com/v3-ext/auth/OS-FEDERATION/SSO/metadata</a> or <a href="https://iam.eu-nl.otc.t-systems.com/v3-ext/auth/OS-FEDERATION/SSO/metadata" target="_blank" rel="noopener noreferrer">https://iam.eu-nl.otc.t-systems.com/v3-ext/auth/OS-FEDERATION/SSO/metadata</a>, right-click on the page, choose <strong id="iam_08_0003__en-us_topic_0272447057_b1611102565911">Save As</strong>, and set a file name, for example, <strong id="iam_08_0003__en-us_topic_0272447057_b51111925185913">api-metadata-region.xml</strong>.<p id="iam_08_0003__en-us_topic_0272447057_p339117208507">The cloud platform provides different API gateways for users in different regions to call APIs. To allow users to access resources in multiple regions, download metadata files of all these regions.</p>
</li></ul>
</p></li><li id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_li19378125420417"><span>Upload the metadata file to the enterprise IdP server. For details, see the help documentation of the enterprise IdP.</span></li><li id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_li17371448151420"><span>Obtain the metadata file of the enterprise IdP. For details, see the help documentation of the enterprise IdP.</span></li></ol>
</div>
<div class="section" id="iam_08_0003__en-us_topic_0272447057_section1725417499229"><h4 class="sectiontitle">Creating an IdP Entity on the Cloud Platform</h4><p id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_p14271944725">To create an IdP entity on the IAM console, do as follows:</p>
<ol id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_ol21644229"><li id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_li7670737"><span>Log in to the IAM console, choose <strong id="iam_08_0003__en-us_topic_0272447057_b1938015403">Identity Providers</strong> from the navigation pane, and click <strong id="iam_08_0003__en-us_topic_0272447057_b493811113409">Create Identity Provider</strong> in the upper right corner.</span><p><div class="fignone" id="iam_08_0003__en-us_topic_0272447057_fig2842101120617"><span class="figcap"><b>Figure 1 </b>Creating an IdP entity</span><br><span><img id="iam_08_0003__en-us_topic_0272447057_image10842911668" src="en-us_image_0000001607217960.png" height="138.263475" width="456.855" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_li202871146194"><span>Specify the name, protocol, SSO type, status, and description of the IdP entity.</span><p><div class="fignone" id="iam_08_0003__en-us_topic_0272447057_fig8619797713"><span class="figcap"><b>Figure 2 </b>Setting IdP parameters</span><br><span><img id="iam_08_0003__en-us_topic_0272447057_image66201891276" src="en-us_image_0000001656578205.png" width="397.005" height="364.887495" title="Click to enlarge" class="imgResize"></span></div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_08_0003__en-us_topic_0272447057_table13359917121514" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Basic parameters of an IdP</caption><thead align="left"><tr id="iam_08_0003__en-us_topic_0272447057_row15360181711151"><th align="left" class="cellrowborder" valign="top" width="16.79%" id="mcps1.3.4.3.2.2.2.2.3.1.1"><p id="iam_08_0003__en-us_topic_0272447057_p1036014179156">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="83.21%" id="mcps1.3.4.3.2.2.2.2.3.1.2"><p id="iam_08_0003__en-us_topic_0272447057_p93601174153">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_08_0003__en-us_topic_0272447057_row12360117121518"><td class="cellrowborder" valign="top" width="16.79%" headers="mcps1.3.4.3.2.2.2.2.3.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p1436091721512">Name</p>
</td>
<td class="cellrowborder" valign="top" width="83.21%" headers="mcps1.3.4.3.2.2.2.2.3.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p1986191412161">IdP name, which must be unique globally. You are advised to use the domain name.</p>
</td>
</tr>
<tr id="iam_08_0003__en-us_topic_0272447057_row14360617141513"><td class="cellrowborder" valign="top" width="16.79%" headers="mcps1.3.4.3.2.2.2.2.3.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p183601417161514">Protocol</p>
</td>
<td class="cellrowborder" valign="top" width="83.21%" headers="mcps1.3.4.3.2.2.2.2.3.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p98517227172">IdP protocol. The cloud platform supports SAML and OpenID Connect protocols. For details about OpenID Connect-based identity federation, see <a href="iam_08_0022.html#iam_08_0022">Virtual User SSO via OpenID Connect</a>.</p>
</td>
</tr>
<tr id="iam_08_0003__en-us_topic_0272447057_row0360417131519"><td class="cellrowborder" valign="top" width="16.79%" headers="mcps1.3.4.3.2.2.2.2.3.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p63602173158">SSO Type</p>
</td>
<td class="cellrowborder" valign="top" width="83.21%" headers="mcps1.3.4.3.2.2.2.2.3.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p636091719158">IdP type. An account can have only one type of IdP. The following describes the virtual user type.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p116518202534">Virtual user SSO: After a federated user logs in to the cloud platform, the system automatically creates a virtual user for the federated user. An account can have multiple IdPs of the virtual user type.</p>
</td>
</tr>
<tr id="iam_08_0003__en-us_topic_0272447057_row2360141714155"><td class="cellrowborder" valign="top" width="16.79%" headers="mcps1.3.4.3.2.2.2.2.3.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p73602177155">Status</p>
</td>
<td class="cellrowborder" valign="top" width="83.21%" headers="mcps1.3.4.3.2.2.2.2.3.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p1836014177159">IdP status. The default value is <strong id="iam_08_0003__en-us_topic_0272447057_b1960811745118">Enabled</strong>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</p></li><li id="iam_08_0003__en-us_topic_0272447057_li1680343023216"><span>Click <strong id="iam_08_0003__en-us_topic_0272447057_b679415618112">OK</strong>.</span></li></ol>
</div>
<div class="section" id="iam_08_0003__en-us_topic_0272447057_section1245888153813"><h4 class="sectiontitle">Configuring the Metadata File of the Enterprise IdP on the Cloud Platform</h4><p id="iam_08_0003__en-us_topic_0272447057_p1466745753818">To configure the metadata file of the enterprise IdP in the cloud platform, you can upload the metadata file or manually edit metadata on the IAM console. For a metadata file larger than 500 KB, manually configure the metadata. If the metadata has been changed, upload the latest metadata file or edit the existing metadata to ensure that the federated users can log in to the cloud platform successfully.</p>
<div class="note" id="iam_08_0003__en-us_topic_0272447057_note144179481770"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="iam_08_0003__en-us_topic_0272447057_p134181348175">For details about how to obtain the metadata file of an enterprise IdP, see the help documentation of the enterprise IdP.</p>
</div></div>
<div class="p" id="iam_08_0003__en-us_topic_0272447057_p15369104515710"><ul id="iam_08_0003__en-us_topic_0272447057_ul115435233813"><li id="iam_08_0003__en-us_topic_0272447057_li1054318218388"><strong id="iam_08_0003__en-us_topic_0272447057_b37581727201019">Upload a metadata file.</strong><ol id="iam_08_0003__en-us_topic_0272447057_ol1954315220382"><li id="iam_08_0003__en-us_topic_0272447057_li1888833818014">Click <strong id="iam_08_0003__en-us_topic_0272447057_b257918350107">Modify</strong> in the row containing the IdP.<div class="fignone" id="iam_08_0003__en-us_topic_0272447057_fig1958316510810"><span class="figcap"><b>Figure 3 </b>Modifying an IdP</span><br><span><img id="iam_08_0003__en-us_topic_0272447057_image19583115783" src="en-us_image_0000001656458721.png" height="128.44807500000002" width="465.83250000000004" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="iam_08_0003__en-us_topic_0272447057_li25415213812">Click <strong id="iam_08_0003__en-us_topic_0272447057_b1387718458108">Select File</strong> and select the metadata file of the enterprise IdP.<div class="fignone" id="iam_08_0003__en-us_topic_0272447057_fig9902501887"><span class="figcap"><b>Figure 4 </b>Uploading a metadata file</span><br><span><img id="iam_08_0003__en-us_topic_0272447057_image199019501286" src="en-us_image_0000001606779168.png" height="66.83250000000001" width="523.6875" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="iam_08_0003__en-us_topic_0272447057_li454352183810">Click <strong id="iam_08_0003__en-us_topic_0272447057_b73321154191015">Upload</strong>. The metadata extracted from the uploaded file is displayed. Click <strong id="iam_08_0003__en-us_topic_0272447057_b18480185614104">OK</strong>.<ul id="iam_08_0003__en-us_topic_0272447057_ul115414223816"><li id="iam_08_0003__en-us_topic_0272447057_li10541112123814">If the uploaded metadata file contains multiple IdPs, select the IdP you want to use from the <strong id="iam_08_0003__en-us_topic_0272447057_b679319171113">Entity ID</strong> drop-down list.</li><li id="iam_08_0003__en-us_topic_0272447057_li195418219381">If a message is displayed indicating that no entity ID is specified or the signing certificate has expired, check the metadata file and upload it again, or configure the metadata manually.</li></ul>
</li><li id="iam_08_0003__en-us_topic_0272447057_li1480810139400">Click <strong id="iam_08_0003__en-us_topic_0272447057_b13522192411363">OK</strong>.</li></ol>
</li></ul>
<ul id="iam_08_0003__en-us_topic_0272447057_ul13549028387"><li id="iam_08_0003__en-us_topic_0272447057_li95491027381"><strong id="iam_08_0003__en-us_topic_0272447057_b0939172741219">Manually configure metadata.</strong><ol id="iam_08_0003__en-us_topic_0272447057_ol175491224389"><li id="iam_08_0003__en-us_topic_0272447057_li1254619217384">Click <strong id="iam_08_0003__en-us_topic_0272447057_b15484133071213">Manually configure</strong>.<div class="fignone" id="iam_08_0003__en-us_topic_0272447057_fig1023213115920"><span class="figcap"><b>Figure 5 </b>Manually configuring metadata</span><br><span><img id="iam_08_0003__en-us_topic_0272447057_image102321318911" src="en-us_image_0000001606939052.png" height="60.928364" width="463.83750000000003" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="iam_08_0003__en-us_topic_0272447057_li1654911233819">In the <strong id="iam_08_0003__en-us_topic_0272447057_b163642810119">Configure Metadata</strong> dialog box, set the metadata parameters, such as <strong id="iam_08_0003__en-us_topic_0272447057_b96362282119">Entity ID</strong>, <strong id="iam_08_0003__en-us_topic_0272447057_b1963672811111">Signing Certificate</strong>, and <strong id="iam_08_0003__en-us_topic_0272447057_b18636228101119">SingleSignOnService</strong>.
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_08_0003__en-us_topic_0272447057_table65491029383" frame="border" border="1" rules="all"><thead align="left"><tr id="iam_08_0003__en-us_topic_0272447057_row6547182103814"><th align="left" class="cellrowborder" valign="top" width="28.282828282828287%" id="mcps1.3.5.4.2.1.2.2.5.1.4.1.1"><p id="iam_08_0003__en-us_topic_0272447057_p14547162173813">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="23.232323232323235%" id="mcps1.3.5.4.2.1.2.2.5.1.4.1.2"><p id="iam_08_0003__en-us_topic_0272447057_p65471321386">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="48.484848484848484%" id="mcps1.3.5.4.2.1.2.2.5.1.4.1.3"><p id="iam_08_0003__en-us_topic_0272447057_p1654717212387">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_08_0003__en-us_topic_0272447057_row45486218382"><td class="cellrowborder" valign="top" width="28.282828282828287%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p15547728389">Entity ID</p>
</td>
<td class="cellrowborder" valign="top" width="23.232323232323235%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p185479263813">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="48.484848484848484%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.3 "><p id="iam_08_0003__en-us_topic_0272447057_p15471021389">The unique identifier of an IdP. Enter the value of <strong id="iam_08_0003__en-us_topic_0272447057_b17657193411117">entityID</strong> displayed in the enterprise IdP's metadata file.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p105479213387">If the metadata file contains multiple IdPs, choose the one you want to use.</p>
</td>
</tr>
<tr id="iam_08_0003__en-us_topic_0272447057_row05481124386"><td class="cellrowborder" valign="top" width="28.282828282828287%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p15484211385">Protocol</p>
</td>
<td class="cellrowborder" valign="top" width="23.232323232323235%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p15488212385">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="48.484848484848484%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.3 "><p id="iam_08_0003__en-us_topic_0272447057_p19548723386">Protocol used for identity federation between an enterprise IdP and SP.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p011164143119">The protocol is selected by default.</p>
</td>
</tr>
<tr id="iam_08_0003__en-us_topic_0272447057_row554815273816"><td class="cellrowborder" valign="top" width="28.282828282828287%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p45481521383">NameIdFormat</p>
</td>
<td class="cellrowborder" valign="top" width="23.232323232323235%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p754816253816">No</p>
</td>
<td class="cellrowborder" valign="top" width="48.484848484848484%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.3 "><p id="iam_08_0003__en-us_topic_0272447057_p0548172123819">Enter the value of <strong id="iam_08_0003__en-us_topic_0272447057_b43539429121">NameIdFormat</strong> displayed in the IdP metadata file.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p1854813212388">It specifies the username identifier format supported by the IdP, which is used for communication between the IdP and federated user.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p19380191263011">If you configure multiple values, the cloud platform uses the first value by default.</p>
</td>
</tr>
<tr id="iam_08_0003__en-us_topic_0272447057_row954816283817"><td class="cellrowborder" valign="top" width="28.282828282828287%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p35489283816">Signing Certificate</p>
</td>
<td class="cellrowborder" valign="top" width="23.232323232323235%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p85488203810">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="48.484848484848484%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.3 "><p id="iam_08_0003__en-us_topic_0272447057_p19548132203818">Enter the value of <strong id="iam_08_0003__en-us_topic_0272447057_b13299155417122">&lt;X509Certificate&gt;</strong> displayed in the IdP metadata file.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p1054820293816">A signing certificate is a public key certificate used for signature verification. For security purposes, enter a public key containing at least 2,048 bits. The signing certificate is used during identity federation to ensure that assertions are credible and complete.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p93711385303">If you configure multiple values, the cloud platform uses the first value by default.</p>
</td>
</tr>
<tr id="iam_08_0003__en-us_topic_0272447057_row125491029387"><td class="cellrowborder" valign="top" width="28.282828282828287%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p15548727383">SingleSignOnService</p>
</td>
<td class="cellrowborder" valign="top" width="23.232323232323235%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p10548162163813">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="48.484848484848484%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.3 "><p id="iam_08_0003__en-us_topic_0272447057_p19548629389">Enter the value of <strong id="iam_08_0003__en-us_topic_0272447057_b93306615133">SingleSignOnService</strong> displayed in the IdP metadata file.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p19548202123812">This parameter defines how SAML requests are sent during SSO. It must support HTTP Redirect or HTTP POST.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p199221331132918">If you configure multiple values, the cloud platform uses the first value by default.</p>
</td>
</tr>
<tr id="iam_08_0003__en-us_topic_0272447057_row17549821380"><td class="cellrowborder" valign="top" width="28.282828282828287%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.1 "><p id="iam_08_0003__en-us_topic_0272447057_p175491029386">SingleLogoutService</p>
</td>
<td class="cellrowborder" valign="top" width="23.232323232323235%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.2 "><p id="iam_08_0003__en-us_topic_0272447057_p145493263820">No</p>
</td>
<td class="cellrowborder" valign="top" width="48.484848484848484%" headers="mcps1.3.5.4.2.1.2.2.5.1.4.1.3 "><p id="iam_08_0003__en-us_topic_0272447057_p15491424385">Enter the value of <strong id="iam_08_0003__en-us_topic_0272447057_b13365517171315">SingleLogoutService</strong> displayed in the IdP metadata file.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p5549624387">This parameter indicates the address to which federated users will be redirected after logging out their sessions. It must support HTTP Redirect or HTTP POST.</p>
<p id="iam_08_0003__en-us_topic_0272447057_p136663503016">If you configure multiple values, the cloud platform uses the first value by default.</p>
</td>
</tr>
</tbody>
</table>
</div>
<p id="iam_08_0003__en-us_topic_0272447057_p15491525382">The following example shows the metadata file of an enterprise IdP and the manually configured metadata.</p>
<div class="fignone" id="iam_08_0003__en-us_topic_0272447057_fig1654911223810"><span class="figcap"><b>Figure 6 </b>Metadata file of an enterprise IdP</span><br><span><img id="iam_08_0003__en-us_topic_0272447057_image1454918213814" src="en-us_image_0272447834.png" height="113.471743" width="465.5" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="iam_08_0003__en-us_topic_0272447057_li82661597405">Click <strong id="iam_08_0003__en-us_topic_0272447057_b755641963717">OK</strong>.</li></ol>
</li></ul>
</div>
</div>
<div class="section" id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_section251463513316"><h4 class="sectiontitle">Related Operations</h4><ul id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_ul4296945016821"><li id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_li3998488416821">Viewing IdP information: In the IdP list, click <strong id="iam_08_0003__en-us_topic_0272447057_b38461712175">View</strong> in the row containing the IdP, and view its basic information, metadata, and identity conversion rules.<div class="note" id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_note1768310816844"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_p2493024416844">To modify the configuration of an IdP, click <strong id="iam_08_0003__en-us_topic_0272447057_b7611722191713">Modify</strong> at the bottom of the details page.</p>
</div></div>
</li><li id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_li1227968616821">Modifying an IdP: In the IdP list, click <strong id="iam_08_0003__en-us_topic_0272447057_b63521155131414">Modify</strong> in the row containing the IdP, and then change its status or modify the description, metadata, or identity conversion rules.</li><li id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_li5904713316821">Deleting an IdP: In the IdP list, click <strong id="iam_08_0003__en-us_topic_0272447057_b19497449171710">Delete</strong> in the row containing the IdP, and click <strong id="iam_08_0003__en-us_topic_0272447057_b849817493172">Yes</strong> in the displayed dialog box.</li></ul>
</div>
<div class="section" id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_section39638585"><h4 class="sectiontitle">Follow-Up Procedure</h4><ul id="iam_08_0003__en-us_topic_0272447057_en-us_topic_0175818704_ul11792191715210"><li id="iam_08_0003__en-us_topic_0272447057_li1256523019563">Configure the enterprise IdP: Configure enterprise IdP parameters to determine what information can be sent to the cloud platform.</li><li id="iam_08_0003__en-us_topic_0272447057_li25282052115619">Configure identity conversion rules: In the <strong id="iam_08_0003__en-us_topic_0272447057_b2811125619190">Identity Conversion Rules</strong> area, configure identity conversion rules to establish a mapping between enterprise users and IAM user groups. In this way, enterprise users can obtain the corresponding permissions in the cloud platform. For details, see <a href="iam_08_0004.html#iam_08_0004">Step 3: Configure Identity Conversion Rules</a>.</li><li id="iam_08_0003__en-us_topic_0272447057_li53241455165615">Verify the federated login: Check whether the enterprise user can log in to the cloud platform through SSO. For details, see <a href="iam_08_0025.html#iam_08_0025">Step 4: Verify the Federated Login</a>.</li></ul>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="iam_08_0002.html">Virtual User SSO via SAML</a></div>
</div>
</div>
<script language="JavaScript">
<!--
image_size('.imgResize');
var msg_imageMax = "view original image";
var msg_imageClose = "close";
//--></script>
View Git Blame Copy Permalink