Step 3: Create a SAML application in the source environment

POST {{apiPath}}/environments/{{envID}}/applications

Create a SAML application in the source environment using a POST {{apiPath}}/environments/{{sourceEnvID}}/applications request.

  • The application name must be unique to the environment.

  • The acsUrls entry must contain the destination environment ID. Use the authentication path extension for your region, such as auth.pingone.eu or auth.pingone.com. For example, https://auth.pingone.com/{{destinationEnvID}}/saml20/sp/acs.

  • The spEntityId value must be unique to the environment and is also used as the spEntityId value when you create an IdP for the destination environment in a subsequent step.

  • Set assertionDuration to 300 seconds.

  • Set the idpSigningKey ID value to the key that you copied in a previous step.

For more information, see Create Application (SAML Protocol).

Request Body

{"name"=>"saml-test-apps_{{$timestamp}}", "description"=>"saml test source application", "enabled"=>true, "type"=>"WEB_APP", "protocol"=>"SAML", "assertionSigned"=>true, "assertionDuration"=>300, "acsUrls"=>["https://auth.pingone.com/{{destinationEnvID}}/saml20/sp/acs"], "spEntityId"=>"samlTests_{{$timestamp}}", "idpSigning"=>{"key"=>{"id"=>"{{keyID}}"}, "algorithm"=>"SHA256withRSA"}}

HEADERS

KeyDatatypeRequiredDescription
Authorizationstring
Content-Typestring