Get the URL of a SAML Identity Provider Through Common Services

After you add an identity federation and you choose to configure a Security Assertion Markup Language (SAML) provider by getting the URL, you complete the following steps.

There are various ways to access Common ServicesIdentity & Access, but only one is described here. Configure a SAML provider by getting the URL from Common ServicesIdentity & AccessIdentity Federations.

1. Select Configure Identity Provider.

2. Select Get URL.
3. Go to your identity provider’s console to view the URL where the profile is stored. For example, this could be an Okta URL, a PingID URL, an Azure URL, and more.
4. In the , enter the URL.
5. Select Next.
6. After the provider profile fields auto-populate, select Finish.
7. The Configure Identity Provider button is replaced with the Login URL. The Login URL is how Palo Alto Networks knows where to send the user when they log in. This is disabled by default. Select ActionsEnable.