> ## Documentation Index
> Fetch the complete documentation index at: https://tyk.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# SAML SP metadata

> Returns the SAML Service Provider (SP) metadata XML for the specified profile.
Register this URL as the SP metadata endpoint in your SAML IdP configuration.




## OpenAPI

````yaml /swagger/5.13/identity-broker-swagger.yml get /auth/{id}/saml/metadata
openapi: 3.0.3
info:
  title: Tyk Identity Broker (TIB) API
  description: >
    The Tyk Identity Broker (TIB) acts as a delegated authentication gateway
    between

    external identity providers (OAuth/Social, SAML, LDAP, Reverse Proxy) and
    the

    Tyk ecosystem.


    ## Authentication


    Profile management endpoints (`/api/*`) require an `Authorization` header
    whose

    value must exactly match the `Secret` field in `tib.conf`.


    Auth flow endpoints (`/auth/*`) are public — they are the entry points for

    end-user authentication and are called by browsers or API clients, not by

    back-end services.
  version: v1.7.2
  contact:
    email: support@tyk.io
    name: Tyk Technologies
    url: https://tyk.io/contact
servers:
  - url: http://localhost:3010
    description: Default local TIB instance
security: []
tags:
  - name: Auth
    description: Entry points for identity-provider authentication flows (public)
  - name: Profiles
    description: CRUD management of TIB profiles (requires Authorization header)
  - name: Health
    description: Health check
paths:
  /auth/{id}/saml/metadata:
    get:
      tags:
        - Auth
      summary: SAML SP metadata
      description: >
        Returns the SAML Service Provider (SP) metadata XML for the specified
        profile.

        Register this URL as the SP metadata endpoint in your SAML IdP
        configuration.
      operationId: samlMetadata
      parameters:
        - $ref: '#/components/parameters/profileId'
      responses:
        '200':
          description: SAML SP metadata XML.
          content:
            application/xml:
              schema:
                type: string
        '400':
          description: Missing or invalid profile ID.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIErrorMessage'
components:
  parameters:
    profileId:
      name: id
      in: path
      required: true
      description: The unique identifier of the authentication profile.
      schema:
        type: string
      example: github-sso-dashboard
  schemas:
    APIErrorMessage:
      type: object
      properties:
        Status:
          type: string
          enum:
            - error
          example: error
        Error:
          type: string
          description: Human-readable error message.
          example: Profile not found

````