SAML 2.0
FoxIDs supports SAML 2.0 as both authentication method and application registration.
SAML (Security Assertion Markup Language) 2.0 is an XML-based open standard for authentication and authorization. It enables Single Sign-On (SSO), allowing users to authenticate once and gain access to multiple applications without needing to re-enter credentials.
The two SAML 2.0 flows are supported in authentication methods and application registrations: the SP-Initiated Login flow, which is the most widely used and recommended flow, and the IdP-initiated Login flow.
FoxIDs supports both RSA and ECDSA certificates as SAML signature validation certificates, configurable signature validation algorithm allowlists, and XML canonicalisation interoperability for SAML signatures. SAML application registrations can also encrypt authentication responses with separate data encryption and key encryption algorithm settings.
Authentication method
Configure a SAML 2.0 authentication method that trusts an external SAML 2.0 Identity Provider (IdP).
SAML 2.0 is widely used in enterprise environments, enabling secure identity federation across different organisations and applications.
How-to guides:
- Connect Microsoft Entra ID
- Connect PingIdentity / PingOne
- Connect Google Workspace
- Connect Microsoft AD FS
- Connect NemLog-in (Danish IdP)
- Connect Context Handler (Danish identity broker)
Application registration
Configure your application as a SAML 2.0 application registration.
How-to guides:
- Connect AD FS
- Connect Amazon IAM Identity Center
- Connect Google Workspace
- Connect Microsoft Entra ID
- Connect Context Handler test IdP (Danish identity broker)
Connect FoxIDs environments
FoxIDs environments can be connected in two ways:
- Environment Link for environments in the same tenant.
- OpenID Connect for environments in the same or different tenants.
Choose Environment Link when both environments are in the same tenant and you want the simplest setup. Choose OpenID Connect when you need to connect across tenants or across separate FoxIDs deployments.
Claim mappings
Claim mappings between SAML 2.0 claim types and JWT claim types are created automatically and can be configured in the settings menu in FoxIDs Control. The claim mappings are global for the environment.
SAML 2.0 claims are internally converted to JWT claims between authentication method and application registration.
