IdP v5 external authentication error

[Paul B. Henson]

On Mon, Mar 17, 2025 at 06:49:58PM -0300, Martin Salvadori wrote:

> I'm new to SAML. Could you please clarify which is the appropriate binding
> I should use?

Is this the documentation for what you're doing?

https://support.google.com/a/answer/12032922?hl=en

If so, it sucks ;).

I'm assuming by "Sign-in page URL" they mean where the google SP should
send the authn request? Those are defined by the SingleSignOnService
entries in your idp metadata, usually there are two:

https://idp.example.com/idp/profile/SAML2/POST/SSO
https://idp.example.com/idp/profile/SAML2/Redirect/SSO

which one to use depends on whether google is using the POST or Redirect
binding for the authn request.

Hmm, under "Create a SAML SSO profile", step 5 says you can just upload
the idp metadata as an xml file. Do that and ideally it will sort out
what it needs on its own...