After adding an external identity provider to Hyland Experience, you must add Hyland Experience to the external identity provider as a service provider (SP). The following table provides the SP metadata required for external identity providers to work with Hyland Experience. The names used for SP metadata may vary depending on the external identity provider.
Detailed instructions on how to configure an external identity provider to authenticate and return valid tokens for use with Hyland Experience are beyond the scope of this documentation. Detailed instructions for configuring the external identity provider are available from the developer of the software being used.
| Setting | URL |
|---|---|
| SP Entity ID |
Also called the Audience URI, the Entity ID has the following format: https://auth.iam.experience.hyland.com/idp/federation/[provider-id]
|
| Sign-On URL |
The sign-on URL for Hyland Experience matches the Entity ID. Not all identity providers require a sign-on URL. https://auth.iam.experience.hyland.com/idp/federation/[provider-id]
|
| Metadata URL |
The metadata URL has the following format: https://auth.iam.experience.hyland.com/idp/federation/[provider-id]/saml2
|
| Assertion Consumer Service (ACS) URL |
Also called the reply URL, the ACS URL has the following format: https://auth.iam.experience.hyland.com/idp/federation/[provider-id]/saml/acs
|