Database.com Metadata API Developer's Guide - Salesforce.com

Metadata TypesSamlSsoConfigField NamedecryptionCertificateerrorUrlidentityLocationField TypestringstringSamlIdentityLocationType(enumeration of typestring)DescriptionThe name of the certificate to use for decrypting incoming SAMLassertions. This certificate is saved in the organization’s Certificateand Key Management list. Available in API version 30.0 and later.The URL of the page users should be directed to if there’s an errorduring SAML login. It must be a publicly accessible page. The URLcan be absolute or relative.The location in the assertion where a user should be identified. Validvalues are:• SubjectNameId — The identity is in the statement of the assertion.• Attribute — The identity is specified in an, located in the of theassertion.identityMappingissuerloginUrllogoutUrlnameoauthTokenEndpointredirectBindingsalesforceLoginUrlsamlEntityIdSamlIdentityType(enumeration of typestring)stringstringstringstringstringbooleanstringstringThe identifier the service provider uses for the user duringJust-in-Time user provisioning. Valid values are:• Username — The user’s salesforce.com username.• FederationId — The federation ID from the user object; theidentifier used by the service provider for the user.• UserId — The user ID from the user’s Database.comorganization.The identification string for the Identity Provider.For SAML 2.0 only: The URL where Database.com sends a SAMLrequest to start the login sequence.For SAML 2.0 only: The URL to direct the user to when they clickthe Logout link. The default is http://www.salesforce.com.The unique name used by the API and managed packages. Thename must begin with a letter and use only alphanumeric charactersand underscores. The name cannot end with an underscore or havetwo consecutive underscores.For SAML 2.0 only: The ACS URL used with enablingDatabase.com as an identity provider in the Web single sign-onOAuth assertion flow.If you’re using My Domain, chose the binding mechanism youridentity provider requests for your SAML messages. Values are:• HTTP POST — HTTP POST binding sends SAML messagesusing base64-encoded HTML forms.• HTTP Redirect — HTTP Redirect binding sendsbase64-encoded and URL-encoded SAML messages withinURL parameters.The URL associated with login for the Web single sign-on flow.The issuer in SAML requests generated by Database.com, and isalso the expected audience of any inbound SAML Responses. If youdon’t have domains deployed, this value can behttps://saml.salesforce.com or145