SAML IdP Metadata Builder
Generate SAML 2.0 IdP EntityDescriptor metadata with SSO, SLO, and X.509 signing certificate.
Build SAML 2.0 identity provider metadata
Federation partners exchange metadata XML describing entity IDs, SSO endpoints, optional
logout URLs, and signing certificates. An IdP publishes an EntityDescriptor with an
IDPSSODescriptor that lists SingleSignOnService bindings (commonly HTTP-Redirect)
and KeyDescriptor entries for signature verification.
Enter your IdP entity ID, SSO URL, optional SLO URL, and PEM signing certificate to generate metadata you
can host at a well-known URL (for example /metadata.xml). Related:
SAML SP Metadata Builder,
SAML Assertion Inspector.
Certificate formatting
- Paste a PEM file including
BEGIN CERTIFICATElines or raw base64 body only. - Whitespace is stripped before embedding in
ds:X509Certificate. - Leave the field empty to omit
KeyDescriptorwhen drafting metadata before cert issuance.
Frequently Asked Questions
Which SAML bindings are included?
SSO and SLO use HTTP-Redirect in the generated template. Add POST bindings manually if your IdP requires them.
Is metadata signed?
This builder outputs unsigned metadata XML. Many deployments sign metadata separately or rely on HTTPS distribution.
Are certificates sent to a server?
No. XML is assembled entirely in your browser.