Configuration of SP in IdP Interface

This interface is used to register an SP in IdP, update its registration settings, or cancel the SP registration in IdP.

Endpoint URL: IDP_API_BASE_URL/sp

Recommendations

This interface should be implemented in form of a command-line utility. Such utility will provide a standard way for administrators and management applications to control applications configuration in an SSO system.

The utility should be named sso and follow the pretermited predetermined syntax:

sso <action> <options>

Options should be delimited by a space.

Allowed actions:

sso register [idp_id] idp_api_base_url

sso update [idp_id]

sso enable [idp_id]

sso enable [idp_id]

sso unregister [idp_id]

where

register - register the SP in IdP server. See Registering SP in IdP.

update - update registration settings. See Updating Registration Settings of SP in IdP.

unregister - detach SP from IdP. See Cancelling SP registration in IdP.

enable - enable SSO functionality (the application should be already registered in a IdP).

disable - disable SSO functionality and turn to other users authentication model.

idp_id - identifier of idp. This parameter is set by SP on registration in IdP.

idp_api_base_url -prefix to all IdP interfaces endpoints.

Note: The enable and disable actions are out of scope of the APS Identity protocol. SP should possess the ability to perform these actions.