Federation Security Services Guide › Use SAML 2.0 Provider Metadata To Simplify Configuration › Import Metadata Tool › Run the smfedimport Tool

Run the smfedimport Tool

The smfedimport utility can import SAML Identity Providers and Service Providers into a Siteminder policy store and smkeydatabase. If you import a Service Provider input file, the result is a new SiteMinder Service Provider object within an existing affiliate domain. If you import a SAML Identity Provider input file, the result is an authentication scheme based on the SiteMinder SAML 2.0 Template.

When the smfedimport command-line utility is run, the first and second parameters will be the username and password of the Siteminder administrator. The third and final argument is the path to the input XML file.

To run the smfedimport tool

1. At the machine where you installed the Policy Server, open up a command window.
2. Enter the command using the following syntax:

   To import a SAML2 Identity Provider metadata file into the policy store:

   smfedimport -type saml2idp -username <username> -password <password> -entityid <entityid> -name <name> [-importkeys <name>] [-silent] -input <file>
   

   To import a Service Provider metadata file into the policy store:

   smfedimport -type saml2sp -username <username> -password <password> -entityid <entityid> -domainname <name> -authurl <URL> -nameidformat (U|E|X|W|K|N|P|T|U) -nameidtype  (S | U | D)
   -attrname <name> -dnspec <spec> -name <name>
   [-importkeys <name>] [-silent] -input <file>
   

   Note: Switches in square brackets [] are optional.

After the initial command options are processed by smfedimport, the tool prompts you for additional, required data based on the type of file that is being imported. Any optional arguments that are not entered on the command-line have defined default values.