AIP Console - Information - SAML Configuration - How to generate Metadata xml file for SAML configuration

Purpose

The page provides information on configuration of metadata.xml file and how it can be authenticated and added into servers of the IDP, for SAML authentication.

Observed in CAST AIP

ReleaseYes/No
8.3.x✅

Observed on RDBMS

RDBMSYes/No
Oracle Server✅
Microsoft SQL Server✅
CSS2✅

AIP Console

ReleaseYes/No
>1.15✅

Step by Step Scenario

  1. Configure AIP Console for SAML authentication.

Action Plan

To import the metadata.xml file, please follow the below steps -

  1. First we need to generate a Self signed certificate using command:

    On Windows:

    <JRE home>\bin\keytool -genkey -alias mycert -keyalg RSA -keystore “C:\ProgramData\CAST\AipConsole\AipConsole\certificate.jks

  2. Enable  HTTPS as mentioned in the doc  Changing Console and Node port numbers - activating HTTPS

  3. Copy the sample AIP Console Meta Data file  by navigating to  https://localhost:/saml/metadata  and share it to the IT/IDP team. You can generate this after restarting the Console for the first time after configuring to use the SAML.  SAML authentication)

  4. This Metadeta.xml file needs to be shared with the IT Team so that, they will register it in the SAML server and provide you with the metadata.xml file to configure.

  5. Place the file in the machine and specify the path under security.saml.metadata.source in the aipConsole.properties file

During the installation of the AIP Console

Post installation using aipConsole.properties

Description of option

SAML metadata sourcesecurity.saml.metadata.source=

Specify the location for the metadata source (as outlined in IDP MetaData generation), for example:

Windows: <AIP_console_installation>\AipConsole\data\MetadataFile.xml
Linux: $HOME\CAST\AipConsole\data\MetadataFile.xml


  • You can also specify:
    • a http resource by providing a full URL to the metadata file
    • a classpath resource using "classpath:myMetadataFile.xml"


  1. If the above steps do not solve your issue then contact CAST Technical Support. with the following Relevant input

Relevant Input

  • Log file showing the error
  • A detailed list of the steps done
  • Screenshots from AIP Console showing the issue and configuration of SAML.

Notes/comments

Ticket # 29434

Related Pages

SAML authentication

Changing Console and Node port numbers - activating HTTPS