Service provider endpoints for SAML SSO
Use the DigiCert® Private CA service provider values when you configure your SAML application in your identity provider.
Replace <your-ca-host> with the hostname for your Private CA instance.
Service provider endpoint reference
Service provider field | Value |
|---|---|
SP Entity ID | https://<your-ca-host>/certificate-authority/api/v1/auth/saml/metadata |
Assertion Consumer Service URL | https://<your-ca-host>/certificate-authority/api/v1/auth/saml/acs |
Single Logout URL | https://<your-ca-host>/certificate-authority/api/v1/auth/saml/slo |
NameID format | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress |
Binding | HTTP-POST for ACS |
Download the service provider metadata
You can download the DigiCert Private CA service provider metadata from the SAML SSO settings page.
You can also retrieve the metadata from this endpoint:
https://<your-ca-host>/certificate-authority/api/v1/auth/saml/metadata
Use the downloaded metadata to configure DigiCert Private CA as a SAML service provider in your identity provider.