How to setup Shibboleth as SAML provider in Auth0

Old question but I heard this was coming up in some Google searches for configuring SAML via metadata.

SAML metadata can only be uploaded through the Auth0 management API. We have an example of what this looks here. The XML file can be uploaded directly, or a URL can be provided.

Alternatively, you can extract the information you need from the metadata by hand and input it into the dashboard UI:

  • You can use a tool like this x.509 decoder to take the signing certificate (<KeyDescriptor use="signing">) from the metadata and get it into PEM format. Save it to a text file and upload it.
  • For “Sign In URL” use one of the SingleSignonService URLs from the metadata. Typically you will use the one for the HTTP-Redirect binding.
  • The rest of the settings can be left as default and will work with most IdPs. But you may need to track down additional documentation, talk to your IdP administrator, or open an Auth0 support ticket for more complex scenarios.