Skip to content

IdP/SSO

The table below describes the list of actions performed on "IDP" using the RCTL CLI Utility.

Resource Create Get Update Delete
IDP YES YES YES YES

Users are allowed to perform a focused automation approach for IDP integration.

Create Identity Provider

Use the below command to create an Identity Providers

With Encrypted SAML Assertion

./rctl create idp <idp-name> <idp-type> <domain-name> <group-name> --es

Example

./rctl create idp oktainteg okta okta.com oktadmins --es

Output

Success Creating IDP with name: okti
********* IMPORTANT *********
PLEASE SAVE BELOW URL TO CONFIGURE IDP METADATA
-----------------------------
Assertion Consumer Service URL (ACS / SP Identity URL) :
  https://hostname.com/auth/v1/sso/acs/123456-9e26-3232-123qwe456tyu/
Encryption Certificate content :
-----BEGIN CERTIFICATE-----
KSLGNKQ2FsaWZvcSGSLUAMIGSMQswCQYDVQQA1SFKSLGNKQ2FsaWA1S
FKSLGNKQ2FsaWZvcm5pYTESSKLGA1SFKSLGNKQ2FsaWZvcm5pYDAVS
bLbUQ3+iWq1CA0DFSGSLUA=
-----END CERTIFICATE-----

Without Encrypted SAML Assertion

./rctl create idp <idp-name> <idp-type> <domain-name> <group-name>

Example

./rctl create idp demo-sso custom mydomain.io group1

Output

Success Creating IDP with name: demo-sso
********* IMPORTANT *********
PLEASE SAVE BELOW URL TO CONFIGURE IDP METADATA
-----------------------------
Assertion Consumer Service URL (ACS / SP Identity URL) :
  https://hostname.com/auth/v1/sso/acs/123456-9e87-5432-67890/
Group Attribute Statement Name:

Get Identity Providers

Use the below commands to fetch the list of Identity Providers or a single provider

List All

./rctl get idp

Output

Idp Name      Idp Type   Domain Name    Encryption Status   Group Attribute Name
trial-idp3    Ping       mydomain3.co   true                group3
trial-idp2    Customer   mydomain2.co   false               group2
trail-idp1    Okta       mydomain1.co   false               group1

Individual IdP

./rctl get idp <idpname>

Example

./rctl get idp google

Output

Idp Name: trial-idp3
Idp type: Ping
Domain Name: mydomain3.co
Encryption Status: true
Group Attribute Name : group3

Update Identity Provider

Use the below commands to update the existing Identity Providers

Using URL

./rctl update idp <idp-name> <url>

Example

./rctl update idp demo-sso https://mydomain.co/dev/qwertyuiop/sso/metadata

Output

Success UPDATING IDP metadata config with name: demo-sso

Using File Upload

./rctl update idp <idp-name> upload <filepath>

Example

./rctl update idp demo-sso upload /platform/filename.xml

Output

Success UPLOADING IDP file: Updated for demo-sso

Encrypted SAML Assertion Flag Enabled

./rctl update idp <idp-name> <idp-type> <domain-name> <group-name> --es

Example

./rctl update idp demo-sso okta oktadmins --es

Output

Success UPDATING IDP configuration

Encrypted SAML Assertion Flag Disabled

./rctl update idp <idp-name> <idp-type> <domain-name> <group-name>

Example

./rctl update idp demo-sso custom mydomain.io group1

Output

Success UPDATING IDP configuration

Delete Identity Provider

Use the below commands to delete the Identity Providers

Listed Deletion

./rctl delete idp name1, name2, name3

Single Deletion

./rctl delete idp <idp-name>

Example

./rctl delete idp demo-sso