Configuration Guides › Federation Security Services Guide › Use SAML 2.0 Provider Metadata To Simplify Configuration › Export Metadata Tool › smfedexport Tool Examples

smfedexport Tool Examples

Example: Exporting an Identity Provider

smfedexport -type saml2idp -entityid http://www.myidp.com/idp1 
-expiredays 30 -sign -pubkey -slohttpredir http://www.mysite.com
/affwebservices/public/saml2slo -reqsignauthr 
-ssoart http://www.mysite.com/affwebservices/public/saml2sso 
-artressvc http://www.mysite.com/affwebservices/
saml2artifactresolution -output myidpdescription.xml

Example: Exporting a Service Provider

smfedexport -type saml2sp -entityid http://www.myidp.com/sp1
-expiredays 30 -sign -pubkey -slohttpredir http://www.mysite.com/
affwebservices/public/saml2slo -signauthr -aconsvcpost 
http://www.mysite.com/affwebservices/public/saml2assertionconsumer
-aconsvcpostindex 12345 -output myidpdescription.xml

Example: Modifying and Signing an Exported Data File

In this example, you are modifying and digitally signing an XML file using the smfedexport.

To modify and sign a metadata file

1. Edit the existing XML file using an XML editor.
2. Enter the following command:

   smfedexport -sign -infile file -output file
   

   For example:

   smfedexport -sign -infile myspdescription.xml -output newspdescription.xml
   

To modify an exported file that is already digitally signed

1. Edit the existing XML file using an XML editor as need.
2. Delete the <Signature> element from the file.
3. Enter the following command:

   smfedexport -sign -infile file -output file
   

   For example:

   smfedexport -sign -infile myspdescription.xml -output newspdescription.xml