Uploading proxy metadata

Ivanti Access generates proxy metadata by combining the cloud service provider (SP) or the identity provider (IdP) metadata and the signing certificate. The proxy meta data is automatically generated when you configure the SP and IdP in the Ivanti Access administrative portal.

You upload the proxy meta data to the SP and the IdP. When you upload the proxy meta data to the (SP) and the (IdP), you establish a three-way trust between the SP, IdP, and Access. All authentication traffic now goes through Access.

Before you begin

If your deployment is Ivanti Access + Standalone Sentry:

•Ensure that a Standalone Sentry is registered on the Ivanti Access administrative portal.

•The Standalone Sentry is assigned to the profile.

•The profile with configured federated pair is published to Standalone Sentry.

Procedure

Get the proxy metadata from the Ivanti Access administrative portal:

Go to Profile > Federated Pairs.

Expand the row for the federated pair.

For the Access service provider proxy metadata, click the Download link adjacent to Access(SP) Metadata.

You will upload the Access(SP) Metadata file to the identity provider (IdP).

For the Access identity provider proxy metadata, click the Download link adjacent to Access(IDP) Metadata

You will upload the Access(IDP) Metadata file to the cloud service provider (SP).

Upload the proxy metadata to cloud service provider (SP).

Upload the proxy metadata to identity provider (IdP).