Creating a SAML2 Identity Provider

In the Web Companion:

1. Click Secure Accounts in the sidebar
2. Click SAML2 Identity Providers
3. Click Create Identity Provider

Choose which team will control this Identity Provider:

The validity period determines how long the IdP’s certificate is trusted. Most organizations use a 10-year validity for convenience.

1. Review your settings
2. Click Create
3. A threshold proposal is created for team approval

Creating an IdP requires approval from team members:

1. Team members receive a notification on their mobile devices
2. They review the IdP creation details
3. They approve or reject the request

The roundtrip page shows:

• Which team members have approved
• Which are still pending
• Overall progress toward threshold

Once the required threshold is reached, the IdP is created.

After approval:

1. Navigate to Secure Accounts → SAML2 Identity Providers
2. Click on your newly created IdP
3. The details page shows IdP configuration

On the IdP details page:

1. Click Download Metadata
2. Save the XML file to your computer

This metadata file contains:

Use the downloaded metadata to configure your service providers: