Phase 2: Obtain the Identity Provider Metadata File

FlexNet Code Insight 6.14.0

The next phase in SSO setup is to obtain the Identity Provider (IdP) metadata file, using the process required by the IdP.

To obtain the Identity Provider metadata:

1. Follow the IdP’s instructions for obtaining the IdP metadata.

For example, the IdP might require Code Insight to send them the SPMetadata.xml file (generated in Phase 1: Generate Service Provider Metadata) to generate the metadata.

Alternatively, you might be required to generate the IdP metadata file using the IdP user interface. In this situation, you will need to provide access to the SPMetadata.xml file and specify the following single-sign-on URL for Code Insight (also specified in the SPMetadata.xml):

https://myhost.mycompany.com:8443/codeinsight/saml/SSO

2. Once you obtain the IdP metadata, save it as IDPMetadata.xml in fnciInstallPath/config/core/security in the Core Server installation.

Note that the IdP should use X509SubjectName as the NameID format.

If you are configuring SSO with AD FS (Active Directory Federation Services) as the Identity Provider (IdP), refer to the Spring Security SAML Extension documentation (see the following link) for instructions to create a relying-party trust on AD FS. Refer specifically to the content that deals with integration with IdPs.

https://docs.spring.io/autorepo/docs/spring-security-saml/1.0.x-SNAPSHOT/reference/pdf/spring-security-saml-reference.pdf