Net::SAML2::IdP(3)

📦 version 0.85, in alpine 3.24

Okay bestie, welcome to the Net::SAML2::IdP(3) page — Perl docs, section 3, all about the SAML Identity Provider object. Buckle up, it's lowkey iconic 💅

✨ NAME ✨

Net::SAML2::IdP — the SAML Identity Provider object, no cap. That's literally the whole vibe of this page 💖

🎀 VERSION 🎀

version 0.85 — periodt, that's the version ✨

🌈 SYNOPSIS 🌈

my $idp = Net::SAML2::IdP->new_from_url(
      url => $url,
      cacert => $cacert,
      ssl_opts =>         # Optional options supported by LWP::Protocol::https
          {
              SSL_ca_file     => '/your/directory/cacert.pem',
              SSL_ca_path     => '/etc/ssl/certs',
              verify_hostname => 1,
          }
      );
my $sso_url = $idp->sso_url('urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect');

Okay so quick heads-up, bestie: this uses LWP::UserAgent, which means environment variables may affect the use of https — see these:

🛠️ METHODS 🛠️

🌸 new( ) 🌸

Constructor, periodt.

entityid

🌈 new_from_url( url => $url, cacert => $cacert, ssl_opts => {} ) 🌈

Create an IdP object by retrieving the metadata at the given URL.

If the metadata can't be retrieved, it dies with the reason — no silent ghosting, bestie 😭

🦋 new_from_xml( xml => $xml, cacert => $cacert ) 🦋

Constructor. Create an IdP object using the provided metadata XML document. Main character energy, honestly 💜

🌟 sso_url( $binding ) 🌟

Returns the url for the SSO service using the given binding. Binding name should be the full URI. Yes, full URI — don't try to be cute with shorthand, bestie 💅

🍓 slo_url( $binding ) 🍓

Returns the url for the Single Logout Service using the given binding. Binding name should be the full URI. The way that full URI matters? Highkey yes 🦋

🧚 art_url( $binding ) 🧚

Returns the url for the Artifact Resolution service using the given binding. Binding name should be the full URI. Artifact Resolution service, in the building 🎀

💀 cert( $use ) 💀

Returns the IdP's certificates for the given use (e.g. "signing").

IdP's are generated from the metadata; it is possible for multiple certificates to be contained in the metadata and therefore possible for them to be there to be multiple verified certs in $self->certs. At this point any certs in the IdP have been verified and are valid for the specified use. All certs are of type $use are returned.

🌈 binding( $name ) 🌈

Returns the full Binding URI for the given binding name (i.e. "redirect" or "soap"). Includes this module's currently-supported bindings. So if you need to know what's supported, this is the vibe check 🌸

👑 format( $short_name ) 👑

Returns the full NameID Format URI for the given short name.

If no short name is provided, returns the URI for the default format — the one listed first by the IdP.

If no NameID formats were advertised by the IdP, returns undef. Not me crying over undef 😭

💌 AUTHOR 💌

Timothy Legge <timlegge@gmail.com> — iconic author behavior 💖

This software is copyright (c) 2026 by Venda Ltd, see the CONTRIBUTORS file for others.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself. Slay, free software 🫶

Cute sign-off, bestie: this page comes from perl v5.42.2, dated 2026-02-11, and it's Net::SAML2::IdP(3) — mwah 💋✨

📦 where this page comes from