In the Test environment test-IP's and test-accounts are available. Connecting to it is simple (you do not need any contract):
1. Import the metadata (SAML Only)
SP Dashboard: Configure this metadata in your Service Provider: depending on the software used, you must import the metadata file or URL or you must place it on a specific location.
Using the (old) SP form? Configure this metadata in your Service Provider: depending on the software used, you must import the metadata file or URL or you must place it on a specific location.
2. Register your service (SAML only)
After the intake (by telephone), SURFconext team will provide access to the SP Dashboard. Here you can independently manage your service(s) on the SURFconext platform.
2* OpenID Connect
The SP registration form is not yet ready for OpenID Connect. If you wish to use OpenID Connect, please send an email to support@surfconext.nl, with the following information:
- URL to your service
- Redirect URL
- Name of the service
- Description of the service
- Logo URL of the service
- Which attributes (claims) you need
3. Configure your service (OpenID Connect only)
SURFnet provides you with the necessary data for OpenID Connect, which are:
- A username + secret
- A URL to the
.well-knownconfiguration
Configure your service with these data to enable access through OpenID Connect.
4. Test your connection
After logging in to your service, you will see the WAYF-screen with the available test Identity Providers, one of them being "SURFconext Test IdP". This test IdP allows you to test various login and attribute scenarios, common when dealing with SAMLIdentity Providers. Several fictitious user accounts are available with attributes matching real world scenarios. The users are also members of groups that you can use to test retrieval of group information.
De "SURFconext Test IdP" is not available in the Production environment.