Step 6: Create the new identity provider in the destination environment

POST {{apiPath}}/environments/{{destinationEnvID}}/identityProviders

Create the new IdP in the destination environment using the POST /environments/{{destinationEnvID}}/identityProviders endpoint to create the SAML IdP configuration.

• The IdP name must be unique to the environment.

• Assign the same value for spEntityId that you used for the source environment when you created the application.

• Set idpEntityId to a name that's unique to the environment.

• Set ssoEndpoint to the URL that you'll use for single sign-on (SSO).

• Set authnRequestSigned to false.

• Set idpVerification.certificates\[\].id to the verification certificate ID for the destination environment that you copied in the previous step.

For more information, see Create Identity Provider (SAML).

Request Body

{"name"=>"SAML test identity provider", "description"=>"this is SAML IdP test", "type"=>"SAML", "enabled"=>true, "spEntityId"=>"saml-test-idp_{{$timestamp}}", "idpEntityId"=>"https://auth.pingone.com/{{destinationEnvID}}", "ssoBinding"=>"HTTP_POST", "ssoEndpoint"=>"https://auth.pingone.com/{{sourceEnvID}}/saml20/idp/sso", "authnRequestSigned"=>"false", "idpVerification"=>{"certificates"=>[{"id"=>"{{destinationEnvCrtID}}"}]}}

HEADERS