Modifying Metadata for Self Service Portal and VIP Manager

Products

• VIP Authentication Service

Issue/Introduction

After you download the metadata for Self Service Portal and VIP Manager, you must modify it before you import it to the Third Party IdP.

Resolution

For Self Service Portal, do the following:

 

1. Access the link: https://ssp.vip.symantec.com/vipssp/saml/metadata

2. Save the content as a .xml file.

3. Remove the encryption key from this .xml file. Remove the content from <md:KeyDescriptor use="encryption"> to </md:KeyDescriptor>.

4. Replace the following -

 

         <md:AssertionConsumerService

    Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

     Location="https://vip-ssp.symantec.com/vipssp/saml/SSO"/>

     <md:AssertionConsumerService

     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

      Location="https://ssp.vip.symantec.com/vipssp/saml/SSO"

      index="0" isDefault="true"/>

 

With the following content-

 

     <md:AssertionConsumerService

        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

        Location="https://ssp.vip.symantec.com/vipssp/saml/SSO"

        index="0" isDefault="true"/>

     <md:AssertionConsumerService

        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

        Location="https://vip-ssp.symantec.com/vipssp/saml/SSO"

        index="1"/>

 

5. Save the file.

 

For VIP Manager, do the following:-

 

1. Access the link: https://manager.vip.symantec.com/vipmgr/saml/metadata

2. Save the content as a .xml file.

 

3. Replace the following:

     <md:AssertionConsumerService

        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

        Location="https://vipmanager.symantec.com/vipmgr/saml/SSO"/>

     <md:AssertionConsumerService

        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

        Location="https://manager.vip.symantec.com/vipmgr/saml/SSO"

        index="0" isDefault="true"/>

        

         With the following content:

 

     <md:AssertionConsumerService

        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

        Location="https://manager.vip.symantec.com/vipmgr/saml/SSO"

        index="0" isDefault="true"/>

     <md:AssertionConsumerService

        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

        Location="https://vipmanager.symantec.com/vipmgr/saml/SSO"

        index="1"/>

 

4. Save the file.