Return SAML IdP metadata XML.
curl --request GET \ --url https://auth.example.com/saml/idp/metadataFor a tenant that has set its institution (the institution.scopes and institution.display_names settings, which only the platform can change), the IDPSSODescriptor starts with md:Extensions holding one shibmd:Scope (xmlns:shibmd urn:mace:shibboleth:metadata:1.0, regexp=“false”) per registered scope, and md:Organization names the institution in each language it was given (the name and the display name are the institution’s name). A tenant that has set none gets the metadata it always had (no scope, an organization named Authrim). The metadata is signed as before, with these in it, and its ETag changes with them; a service provider may keep it for up to a day. If the tenant’s settings cannot be read the endpoint answers 500 rather than metadata without its scopes.
Responses
Section titled “ Responses ”Successful XML response.