Connect to Renater Federation¶

Presentation¶

Renater provides an SAML federation for higher education in France.

It is based on SAMLv2 but add some specific items like a WAYF service and a metadata bundle to list all SP and IDP from the federation.

Register as Service Provider¶

LL::NG configuration¶

Configure LL::NG as SAML Service Provider with this documentation. You don’t need to declare any IDP for the moment.

Configure SAML Discovery Protocol to redirect users on WAYF Service. The endpoint URL is https://discovery.renater.fr/renater/WAYF.

SAML Federation¶

Follow SAML Federation documentation to enable IDP metadata file bundle download.

Add your SP into the federation¶

Go to https://federation.renater.fr/registry and register your SP.

Attention

Be sure to check all attributes as mandatory to be able to get them in SAML assertions.

Register as Identity Provider¶

LL::NG configuration¶

Configure LL::NG as SAML Identity Provider with this documentation. You don’t need to declare any SP for the moment.

Attention

If your LL::NG server will act as SP and IDP inside Renater federation, you need to set the advanced parameter “Override Entity ID for IDP”. Indeed, Renater do not allow to register a SP and an IDP with the same entityID.

SAML Federation¶

Follow SAML Federation documentation to enable SP metadata file bundle download.

Add your IDP into the federation¶

Go to https://federation.renater.fr/registry and register your IDP.