In this Article we will cover setting up SAML Application using Keycloak SAML.

1. From Keycloak Admin Console, click on Clients from the left navigation menu.
   

2. Click on Create Client button to create a client application which can be used to request authentication of a user.
   

3. Enter the client id and name of the client and save.
   Client ID for hub is https://{workspace-domain-name}.api.trainn.co/hub
   Client ID for academy is https://{workspace-domain-name}.api.trainn.co/academy
   
   
   
   Note: Workspace domain name can be found in the settings page.
   

4. Enter the valid redirect URIs with the following and save.
   For hub is https://{workspace-domain-name}.api.trainn.co/hub/saml/acs
   For academy is https://{workspace-domain-name}.api.trainn.co/academy/saml/acs
   
   

5. Once client is created click on the client scopes to map the scopes for the protocol
   

6. Click on the dedicated scope that is already created or create your own client scope by clicking on Add client scope.
   

7. Click on the Add predefined mapper.
   

8. Select X500 email, X500 givenName and X500 surname from the list of predefined mappers and click on add.
   

9. Now that client is configured, to get the Identity provider metadata, click on the Realm settings under Configure section from left navigation menu.
   

10. Click on the SAML 2.0 Identity Provide metadata link from Endpoints section to get the Login url and SAML certificate for configuring the Hub or Academy SAML SSO settings in Trainn.
    

Docs to configure Video Hub and Academy SAML SSO settings.