Reload the SURFconext SAML Metadata
Below you will find the metadata URLs you must use to keep your instance(s) up-to-date. The URLs for the metadata have not changed, so if you fetch these automatically, you should be all set already.
| Production environment | |
|---|---|
| URL | Remark |
| https://metadata.surfconext.nl/idp-metadata.xml | Use this location to fetch the new, updated metadata of our production environment. |
| https://metadata.surfconext.nl/sp/<your id> | Used by service providers that build their own WAYF. Contains metadata of IdPs connected to your instance. You probably already refresh automatically if you use this. |
| Test environment | |
| URL | Remark |
| https://metadata.test.surfconext.nl/idp-metadata.xml | Use this location to fetch the new correct metadata of our test environment. |
| https://metadata.test.surfconext.nl/idps-metadata.xml | Used by service providers that build their own WAYF. Contains metadata of all connected IdPs. |
The updated SURFconext SAML metadata contains:
- The new SAML signing certificate
- With a corresponding SingleSignOnService location
You need to update both at the same time.
If your SAML library can import this metadata the above will be updated automatically. After updating, you will have a new certificate. The SingleSignOnService Location will contain "20230503". This value differs between our production and test environments, as does the certificate. If logging in works and uses the single sign on URL ending with this ID, you have completed the update and no further actions are required.
Update the SURFconext metadata signing certificate
Making use of our metadata signing certificate is optional. If you make use of this, follow the update instructions.