# Saml2ServiceProviderAuthenticationModuleType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

SAML2 authentication module, service provider configuration.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
entityId | property string | [1,1] | Unique identifier of the service provider.
alias | property string | [0,1] | Unique alias used to identify the selected local service provider based on used URL.
aliasForPath | property string | [0,1] | Alias used for AssertionConsumerServiceURL.
defaultSigningAlgorithm | property Saml2SigningAlgorithmAuthenticationModuleType | [0,1] | Default signing algorithm.
defaultDigest | property Saml2DigestAuthenticationModuleType | [0,1] | Default digest method.
signRequests | property boolean | [0,1] | Flag indicating whether this service signs authentication requests.
wantAssertionsSigned | property boolean | [0,1] | Flag indicating whether this service requires signed assertions.
singleLogoutEnabled | property boolean | [0,1] | Flag indicating whether this service enable single logout.
nameId | property Saml2NameIdAuthenticationModuleType | [0,-1] | Name identifiers to be included in the metadata.
keys | container Saml2KeyAuthenticationModuleType | [0,1] | Key used by service provider.
provider | container Saml2ProviderAuthenticationModuleType | [1,-1] | Possible identity providers for this service provider.
identityProvider | container Saml2ProviderAuthenticationModuleType | [1,1] | Possible identity providers for this service provider.
metadata | container Saml2ProviderMetadataAuthenticationModuleType | [0,1] | Service provider can use prepared metadata.

- ### Items

  - #### entityId

    Flags: RAM,runtime

    Multiplicity: [1,1]

    Unique identifier of the service provider.

  - #### alias

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Unique alias used to identify the selected local service provider based on used URL.

  - #### aliasForPath

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Alias used for AssertionConsumerServiceURL.

  - #### defaultSigningAlgorithm

    Flags: RAM,runtime,AVals:4

    Multiplicity: [0,1]

    Default signing algorithm. Default is RSA_SHA256.

  - #### defaultDigest

    Flags: RAM,runtime,AVals:4

    Multiplicity: [0,1]

    Default digest method. Default is SHA256;

  - #### signRequests

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Flag indicating whether this service signs authentication requests.

  - #### wantAssertionsSigned

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Flag indicating whether this service requires signed assertions.

  - #### singleLogoutEnabled

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Flag indicating whether this service enable single logout.

  - #### nameId

    Flags: RAM,runtime,AVals:5

    Multiplicity: [0,-1]

    Name identifiers to be included in the metadata. Supported values are: EMAIL, TRANSIENT, PERSISTENT, UNSPECIFIED and X509_SUBJECT. Order of NameIDs in the property determines order of NameIDs in the generated metadata.

  - #### keys

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Key used by service provider.

  - #### provider

    Flags: RAM,runtime

    Multiplicity: [1,-1]

    Possible identity providers for this service provider.

  - #### identityProvider

    Flags: RAM,runtime

    Multiplicity: [1,1]

    Possible identity providers for this service provider.

  - #### metadata

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Service provider can use prepared metadata.