skills.rest
DuendeSoftware
DuendeSoftwareOFFICIAL
Explore all skills by this author →
Website𝕏@duendeidentityGitHub

identityserver-saml

Configure Duende IdentityServer as a SAML 2.0 Identity Provider with SP integration.

10|2|Updated Mar 16, 2026
Search Tags:#security#authentication#saml#idp#identityserver#duende
One-click install
npx skills add https://github.com/DuendeSoftware/duende-skills --skill identityserver-saml
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: identityserver-saml
Source: https://github.com/DuendeSoftware/duende-skills/tree/main/skills/identityserver-saml
Command: npx skills add https://github.com/DuendeSoftware/duende-skills --skill identityserver-saml

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

IdentityServer can act as a SAML 2.0 Identity Provider (IdP), enabling federation with legacy Service Providers (SPs) and centralized user management.

Core Features & Use Cases

  • SAML 2.0 IdP support built into Duende.IdentityServer (v8.0+) and requires the Enterprise Edition license.
  • Configure six SAML endpoints (Metadata, Sign-in, Sign-in Callback, IdP-Initiated SSO, Logout, Logout Callback) with per-SP enablement.
  • Manage SPs via the SamlServiceProvider model, including EntityId, AssertionConsumerServiceUrls, Single Logout, signing, encryption, and claim mappings.
  • Extensibility via ISamlClaimsMapper, ISamlInteractionService, and custom ISamlServiceProviderStore for production.
  • Supports configurable NameID formats, signing behavior, metadata validity, and claim mappings to fit various SP requirements.

Quick Start

Add SAML support to IdentityServer by calling AddSaml() and register at least one SamlServiceProvider to enable SP-initiated SSO.

Frequently Asked Questions about identityserver-saml

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure IdentityServer as a SAML 2.0 Identity Provider?▼

To configure IdentityServer as a SAML 2.0 Identity Provider, you must call AddSaml() in your setup and register at least one SamlServiceProvider to enable SP-initiated SSO across the six exposed SAML endpoints.

Do I need a specific license to enable SAML 2.0 IdP support in IdentityServer?▼

SAML 2.0 IdP support in IdentityServer requires the Enterprise Edition license and is available in Duende.IdentityServer v8.0 or later to activate the necessary AddSaml() extension.

How do I manage Service Provider settings for SAML federations in IdentityServer?▼

You manage Service Provider settings for SAML federations using the SamlServiceProvider model to configure EntityId, AssertionConsumerServiceUrls, Single Logout, signing, encryption, and claim mappings.

Can I customize SAML NameID formats and claim mappings for different Service Providers?▼

You can customize SAML NameID formats and claim mappings for different Service Providers through extensibility options like ISamlClaimsMapper, ISamlInteractionService, and custom ISamlServiceProviderStore in production environments.

What SAML endpoints are available when turning IdentityServer into an IdP?▼

Turning IdentityServer into an IdP exposes six SAML endpoints: Metadata, Sign-in, Sign-in Callback, IdP-Initiated SSO, Logout, and Logout Callback, all of which can be toggled on a per-SP basis.

Related Skills

Explore More Software Engineering Skills→
AcczdyAcczdy
2

implementing-google-workspace-sso-configuration

Configure Google Workspace SSO with SAML 2.0 for IdP federation.

Community
Advanced
symfluence-orgsymfluence-org
13

add-optimizer

Implement and register custom optimization algorithms for the SYMFLUENCE calibration loop.

Official
Advanced
chatbotkitchatbotkit
13

hunt-saml

Test SAML endpoints for XSW, NameID manipulation, signature stripping, and XXE vulnerabilities.

Official
Advanced
AcczdyAcczdy
2

implementing-saml-sso-with-okta

Implement SAML 2.0 SSO with Okta for SP-initiated and IdP-initiated flows.

Community
Advanced