Create a SAML identity provider (IdP) in RAM to establish trust between your external IdP and Alibaba Cloud for role-based SSO.
Prerequisites
Obtain the SAML 2.0 metadata document from your IdP. This XML file contains the IdP entity ID, logon endpoints, and signing certificate for verifying SAML assertions.
Procedure
-
Log on to the RAM console as a RAM administrator.
-
In the left-side navigation pane, choose .
-
On the Role-based SSO tab, click the SAML tab, and then click Create IdP.
-
On the Create IdP page, enter an IdP Name and a Note.
-
In the Metadata File section, click Upload Metadata File and upload the metadata document.
-
Click Create IdP.
What to do next
After you create the IdP, create a RAM role that trusts it. This role defines the permissions federated users receive at logon. For more information, see Create a RAM role for a SAML provider.