# SAML Configuration Questions for Elastic Cloud

**URL:** <https://discuss.elastic.co/t/saml-configuration-questions-for-elastic-cloud/343525>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [September 21, 2023, 10:14am UTC](https://discuss.elastic.co/t/saml-configuration-questions-for-elastic-cloud/343525 "2023-09-21T10:14:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![yago82](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yago82/32/97755_2.png) [@yago82](https://discuss.elastic.co/u/yago82)\
**Post date:** [September 21, 2023, 10:14am UTC](https://discuss.elastic.co/t/saml-configuration-questions-for-elastic-cloud/343525/1 "2023-09-21T10:14:26Z")

</div>

Hello Elastic community,

I'm currently working on configuring SAML authentication for Elastic Cloud (not ECE). I have the following SAML configuration that I need to implement:

```auto
xpack.security.authc.realms.saml.saml1:
  order: 2
  idp.metadata.path: saml/idp-metadata.xml
  idp.entity_id: "https://sso.example.com/"
  sp.entity_id: "https://kibana.example.com/"
  sp.acs: "https://kibana.example.com/api/security/saml/callback"
  sp.logout: "https://kibana.example.com/logout"
  attributes.principal: "urn:oid:0.9.2342.19200300.100.1.1"
  attributes.groups: "urn:oid:1.3.6.1.4.1.5923.1.5.1."

```

I have two specific questions:

- IdP Metadata: The Siteminder vendor doesn't provide an IdP metadata URL. How can I configure the IdP metadata file (idp-metadata.xml) in Elastic Cloud without an URL?

- Certificate Upload: Additionally, I would like to know how to upload a certificate (e.g., .pem) in Elastic Cloud, as I couldn't find any documentation regarding this in the Elastic documentation.

I'd appreciate any guidance or insights you can provide to help me with these SAML configuration challenges in Elastic Cloud.

Thank you in advance for your assistance.

---

<div class="post-metadata">

**Author:** ![yago82](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yago82/32/97755_2.png) [@yago82](https://discuss.elastic.co/u/yago82)\
**Post date:** [September 26, 2023, 10:17am UTC](https://discuss.elastic.co/t/saml-configuration-questions-for-elastic-cloud/343525/2 "2023-09-26T10:17:37Z")

</div>

I have likely found the solution to the first point at the following link, point 10.  
[https://www.elastic.co/guide/en/cloud/current/ec-securing-clusters-SAML.html#ec\_configure\_your\_8\_0\_or\_above\_cluster\_to\_use\_saml](https://www.elastic.co/guide/en/cloud/current/ec-securing-clusters-SAML.html#ec_configure_your_8_0_or_above_cluster_to_use_saml)

Regarding the generation of a .pem file to be provided to the SAML administrator, does anyone have an idea of how to generate and upload the file?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 24, 2023, 10:17am UTC](https://discuss.elastic.co/t/saml-configuration-questions-for-elastic-cloud/343525/3 "2023-10-24T10:17:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.