Skip to main content
Command reference

security saml-sp default-metadata create

Suggest changes
PDFs

Create SAML Default Metadata

Availability: This command is available to cluster administrators at the admin privilege level.

Description

The security saml-sp default-metadata create command configures ONTAP with Security Assertion Markup Language (SAML) Service Provider (SP) default metadata for single sign-on authentication. The default metadata is used while configuring the Identity Provider (IDP).

Note This restarts the web server. Any HTTP/S connections that are active will be disrupted.

Parameters

[-sp-host <Remote InetAddress>] - SAML Service Provider Host

This specifies the SAML service provider host IP address.

{ -cert-ca <text> - Server Certificate Issuing CA

This specifies the service provider's certificate issuing CA.

-cert-serial <text> - Server Certificate Serial Number

This specifies the service provider's certificate's serial number.

| [-cert-common-name <FQDN or Custom Common Name>] - Server Certificate Common Name }

This specifies the service provider certificate's common name.

[-foreground {true|false}] - Foreground Process

When this parameter is set to false the command runs in the background as a job. The default is true , which causes the command to return after the operation completes.

Examples

The following example configures ONTAP with SAML default metadata:

cluster1::> security saml-sp default-metadata create -sp-host 1.1.1.1
    [Job 9] Job succeeded: Access the SAML SP default metadata using the URL:
    https://1.1.1.1/saml-sp/Metadata
    cluster1::>