Overview
Create TWO separate SAML setups in your IdP. Note the setups are identical, but the Meal Program adds a configuration to direct the user to a user sign-in URL. Without a redirection, the Meal Program app will not support IdP-initiated logins.
ezCater Marketplace App
Configure the following SAML settings in your IdP:
Metadata URL: https://www.ezcater.com/saml/metadata.xml
Reply URL (ACS URL): https://www.ezcater.com/saml/consume
Audience URI/Issuer/Entity ID: ezcater.com
Do NOT add https or www
Release first name, last name, and email.
Use email as Name ID.
Configure the following SAML settings in your IdP:
Metadata URL: https://www.ezcater.com/saml/metadata.xml
Reply URL (ACS URL): https://www.ezcater.com/saml/consume
Audience URI (SP Entity ID)/Issuer/Entity ID: ezcater.com
Do NOT add https or www
Release first name, last name, and email.
Use email as Name ID.
Redirect Meal Program app user sign-in:
User sign-in URL: https://login.ezcater.com/relish/sso/domain_redirect?domain=mycompany.com (change this to your domain)
Without redirection, IdP-initiated login will not be supported.
Update the app logo with the image below:
Submit your metadata through the ezCater/Meal Program SSO Form. These fields include:
Your Domain(s) - any top level domain where the users receive email Example: company.com
IdP SSO URL - URL that ezCater will use to redirect a user to in order to authenticate with the IdP. Example: https://idp.example.com/sso/saml
IdP Entity ID - Unique identifier that ensures proper routing of authentication requests and responses. Also called Issuer. Example: https://idp.example.com/entity
Public Certificate - Also known as a digital certificate or an SSL/TLS certificate.