Report

Help us improve this tool

SAML IdP Metadata Builder

Generate SAML 2.0 IdP EntityDescriptor metadata with SSO, SLO, and X.509 signing certificate.

O M T

Build SAML 2.0 identity provider metadata

Federation partners exchange metadata XML describing entity IDs, SSO endpoints, optional logout URLs, and signing certificates. An IdP publishes an EntityDescriptor with an IDPSSODescriptor that lists SingleSignOnService bindings (commonly HTTP-Redirect) and KeyDescriptor entries for signature verification.

Enter your IdP entity ID, SSO URL, optional SLO URL, and PEM signing certificate to generate metadata you can host at a well-known URL (for example /metadata.xml). Related: SAML SP Metadata Builder, SAML Assertion Inspector.

Certificate formatting

  1. Paste a PEM file including BEGIN CERTIFICATE lines or raw base64 body only.
  2. Whitespace is stripped before embedding in ds:X509Certificate.
  3. Leave the field empty to omit KeyDescriptor when drafting metadata before cert issuance.

Frequently Asked Questions

Which SAML bindings are included?

SSO and SLO use HTTP-Redirect in the generated template. Add POST bindings manually if your IdP requires them.

Is metadata signed?

This builder outputs unsigned metadata XML. Many deployments sign metadata separately or rely on HTTPS distribution.

Are certificates sent to a server?

No. XML is assembled entirely in your browser.