Endpoint URL specifications

You must define several endpoints on your point of contact server so that communications can be exchanged between you and your partner.

These endpoints are defined when you configure your federation in Security Verify Access. The endpoints are accessible through URLs and are used by the partners in the federation.

The following types of endpoint URLs initiate single sign-on:

Single sign-on service endpoint URL (IP)
The endpoint on the identity provider point of contact server that receives authentication requests. The unauth ACL must be attached to this URL. The syntax of the URL is:
https://isam_hostname:port_number/junction_name/sps/federation_name/saml20/login
Where:
isam_hostname
The host name of the reverse proxy server for the identity provider.
port_number
The port number of the reverse proxy server.
junction_name
The name of the junction created on the reverse proxy server.
federation_name
The name you assigned to the federation when you created it.
Assertion consumer service endpoint (SP)
The endpoint on the service provider point of contact server that receives assertions. The unauth ACL must be attached to this URL. The syntax of the URL is:
https://isam_hostname:port_number/junction_name/sps/federation_name/saml20/login
Where:
isam_hostname
The host name of the reverse proxy server for the service provider.
port_number
The port number of the reverse proxy server.
junction_name
The name of the junction created on the reverse proxy server.
federation_name
The name you assigned to the federation when you created it.
Single logout service endpoint (IP or SP)
The endpoint on the service provider or identity provider point of contact server that receives logout requests. The unauth ACL must be attached to this URL. The syntax of the URL is:
https://isam_hostname:port_number/junction_name/sps/federation_name/saml20/slo
Where:
isam_hostname
The host name of the reverse proxy server for the service provider or identity provider.
port_number
The port number of the reverse proxy server.
junction_name
The name of the junction created on the reverse proxy server.
federation_name
The name you assigned to the federation when you created it.
Artifact resolution service or SOAP endpoint (IP or SP)
The endpoint on the service provider or identity provider where artifacts are exchanged for SAML messages. The unauth ACL must be attached to this URL. The syntax of the URL is:
https://isam_hostname:port_number/junction_name/sps/federation_name/saml20/soap
Where:
isam_hostname
The host name of the reverse proxy server for the service provider or identity provider.
port_number
The port number of the reverse proxy server.
junction_name
The name of the junction created on the reverse proxy server.
federation_name
The name you assigned to the federation when you created it.
Name identifier management service endpoint (IP or SP)
The endpoint on the service provider or identity provider that receives messages related to the name ID management. The unauth ACL must be attached to this endpoint.

The syntax of the URL for HTTP redirect, HTTP POST, and HTTP artifact binding is:

https://isam_hostname:port_number/junction_name/sps/federation_name/saml20/mnids

The syntax of the URL for SOAP binding is:

https://isam_hostname:port_number/junction_name/sps/federation_name/saml20/soap
Where:
isam_hostname
The host name of the reverse proxy server for the service provider or identity provider.
port_number
The port number of the reverse proxy server.
junction_name
The name of the junction created on the reverse proxy server.
federation_name
The name you assigned to the federation when you created it.