Complete the SAML 2.0 authentication scheme prerequisites.

Set-up the authentication scheme for each Identity Provider that generated assertions. Assign a name, description, scheme type, and protection level.

Specify the users who will be authenticated using the SAML 2.0 authentication scheme.

Configure a single sign-on and select the binding to be used.

Associate that scheme with a realm. You can do this on a per Identity Provider basis or create a single custom authentication scheme and single realm.

Enable single logout.

Enable encryption for Name IDs and/or assertions.

Sign artifact resolve message and/or require signed artifact response.

Customize assertions using the Message Consumer Plug-in.