Create the SAML default metadata configuration
POST /security/authentication/cluster/saml-sp/default-metadata
Introduced In: 9.17
Creates the SAML default metadata configuration. Note that common_name is mutually exclusive with serial_number and ca in POST requests.
Optional properties
-
certificate -
host
Parameters
| Name | Type | In | Required | Description |
|---|---|---|---|---|
return_timeout |
integer |
query |
False |
The number of seconds to allow the call to execute before returning. When doing a POST, PATCH, or DELETE operation on a single record, the default is 0 seconds. This means that if an asynchronous operation is started, the server immediately returns HTTP code 202 (Accepted) along with a link to the job. If a non-zero value is specified for POST, PATCH, or DELETE operations, ONTAP waits that length of time to see if the job completes so it can return something other than 202.
|
Request Body
| Name | Type | Description |
|---|---|---|
certificate |
||
host |
string |
The SAML service provider host. |
scope |
string |
Scope of the entity. Set to "cluster" for cluster owned objects and to "svm" for SVM owned objects. |
Example request
{
"certificate": {
"ca": "string",
"common_name": "cluster1",
"serial_number": "1506B24A94F566BA"
},
"host": "string",
"scope": "string"
}
Response
Status: 202, Accepted
| Name | Type | Description |
|---|---|---|
job |
Example response
{
"job": {
"uuid": "string"
}
}
Headers
| Name | Description | Type |
|---|---|---|
Location |
Useful for tracking the resource location |
string |
Response
Status: 201, Created
Error
Status: Default
ONTAP Error Response Codes
| Error Code | Description |
|---|---|
12320794 |
Invalid host parameter for default metadata generation. The host parameter must be the cluster management interface's IP address. If the cluster management interface is not available, the node management interface's IP address must be used. |
12320805 |
The certificate information provided does not match any installed certificates. |
12320806 |
The certificate information entered does not match any installed certificates. |
12320820 |
No certificate is installed with the specified |
12320821 |
No certificate is installed with the specified |
12320825 |
SAML configuration already exists. Cannot create the metadata when SAML configuration is already present. |
12320831 |
Default metadata configuration already exists. |
Also see the table of common errors in the Response body overview section of this documentation.
Definitions
See Definitions
href
| Name | Type | Description |
|---|---|---|
href |
string |
_links
certificate
| Name | Type | Description |
|---|---|---|
ca |
string |
Server certificate issuing certificate authority (CA). This cannot be used with the server certificate common name. |
common_name |
string |
Server certificate common name. This cannot be used with the certificate authority (CA) or serial_number. |
serial_number |
string |
Server certificate serial number. This cannot be used with the server certificate common name. |
security_saml_def_metadata
| Name | Type | Description |
|---|---|---|
certificate |
||
host |
string |
The SAML service provider host. |
scope |
string |
Scope of the entity. Set to "cluster" for cluster owned objects and to "svm" for SVM owned objects. |
job_link
| Name | Type | Description |
|---|---|---|
uuid |
string |
The UUID of the asynchronous job that is triggered by a POST, PATCH, or DELETE operation. |
error_arguments
| Name | Type | Description |
|---|---|---|
code |
string |
Argument code |
message |
string |
Message argument |
returned_error
| Name | Type | Description |
|---|---|---|
arguments |
array[error_arguments] |
Message arguments |
code |
string |
Error code |
message |
string |
Error message |
target |
string |
The target parameter that caused the error. |