---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Generate instance service provider (SP) metadata for SAML

# Generate instance service provider (SP) metadata for SAML {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

As part of your SSO configuration, you can generate the instance SP metadata to
provide to the IdP.

## Vorbereitungen

Role required: sso_config_admin, business_rule_admin, script_include_admin

## Warum und wann dieser Vorgang ausgeführt wird

The IdP needs the instance SP metadata to authenticate and forward requests.

## Prozedur

1. Choose your installed SSO plugin:

   | Option | Bezeichnung |
   | Multi-Provider SSO | Navigate to Multi-Provider SSOIdentity Providers. Choose an IdP and click the Generate Metadata button. The integration automatically generates the instance's SP metadata from the system property settings. |
   | SAML 2 SSO | Navigate to SAML 2 Single Sign-onMetadata. The integration automatically generates the instance's SP metadata from the system property settings. |
   |-|-|

   {#t_GenerateServiceNowSPMetadata__choicetable_eqz_pd4_pdb}
2. Copy the SP metadata in the text box.  
   For example:

       <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://yourinstance.service-now.com">
        	<SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
       		<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://yourinstance.service-now.com/navpage.do" />
       		<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
       		<AssertionConsumerService isDefault="true" index="0" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://yourinstance.service-now.com/navpage.do" />
       		<AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://yourinstance.service-now.com/consumer.do"/>
       	</SPSSODescriptor>
       </EntityDescriptor>

3. Provide the instance SP metadata to the IdP.  
   For example, SSOCircle allows a user to provide the SP metadata online.