---
title: "Get Ncloud Single Sign-On metadata"
slug: "get-sp-metadata"
updated: 2026-09-17T10:05:38Z
published: 2026-09-17T10:05:38Z
canonical: "api.ncloud-docs.com/get-sp-metadata"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://api.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Ncloud Single Sign-On metadata

Available in Classic and VPC

Get Ncloud Single Sign-On's metadata.

## Request

This section describes the request format. The method and URI are as follows:

| Method | URI |
| --- | --- |
| GET | /api/v1/tenant/saml-idp/sp-metadata |

### Request headers

For information about the headers common to all Ncloud Single Sign-On APIs, see [Ncloud Single Sign-On request headers](/docs/en/single-sign-on-overview#%EC%9A%94%EC%B2%AD%ED%97%A4%EB%8D%94).

### Request example

The request example is as follows:

```
curl --location --request GET 'https://sso.apigw.ntruss.com/api/v1/tenant/saml-idp/sp-metadata' \
--header 'x-ncp-apigw-timestamp: {Timestamp}' \
--header 'x-ncp-iam-access-key: {Access Key}' \
--header 'x-ncp-apigw-signature-v2: {API Gateway Signature}'
```

## Response

This section describes the response format.

### Response body

The response body includes the following data:

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `EntityDescriptor.xmlns:md` | String | - | XML namespace information - `urn:oasis:names:tc:SAML:2.0:metadata` (valid value) |
| `EntityDescriptor.ID` | String | - | Entity descriptor's unique identifier |
| `EntityDescriptor.entityID` | String | - | SP entity's unique identifier |
| `EntityDescriptor.SPSSODescriptor.AuthnRequestsSigned` | Boolean | - | Whether to sign AuthnRequest - `true` \| `false` - `true`: sign - `false`: not sign |
| `EntityDescriptor.SPSSODescriptor.WantAssertionsSigned` | Boolean | - | Whether to sign the assertion - `true` \| `false` - `true`: sign - `false`: not sign |
| `EntityDescriptor.SPSSODescriptor.protocolSupportEnumeration` | String | - | Supported protocol - `urn:oasis:names:tc:SAML:2.0:protocol` (valid value) |
| `EntityDescriptor.SPSSODescriptor.KeyDescriptor.use` | String | - | Certificate purpose - `signing` (valid value) |
| `EntityDescriptor.SPSSODescriptor.KeyDescriptor.KeyInfo.xmlns:ds` | String | - | KeyInfo namespace information - `http://www.w3.org/2000/09/xmldsig#` (valid value) |
| `EntityDescriptor.SPSSODescriptor.KeyDescriptor.KeyInfo.X509Data.X509Certificate` | String | - | X.509 certificate for IdP signing |
| `EntityDescriptor.SPSSODescriptor.NameIDFormat` | String | - | Supported NameID format - `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` (valid value) |
| `EntityDescriptor.SPSSODescriptor.AssertionConsumerService.Binding` | String | - | Protocol binding information for SAML login - `urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST` \| `urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect` - `urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST`: HTTP-POST method - `urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect`: HTTP-Redirect method |
| `EntityDescriptor.SPSSODescriptor.AssertionConsumerService.Location` | String | - | SAML login URL mapped to the binding protocol |
| `EntityDescriptor.SPSSODescriptor.AssertionConsumerService.index` | String | - | Index of protocol binding service for SAML login |

### Response status codes

For information about the response status codes common to all Ncloud Single Sign-On APIs, see [Ncloud Single Sign-On response status codes](/docs/en/single-sign-on-overview#%EC%9D%91%EB%8B%B5%EC%83%81%ED%83%9C%EC%BD%94%EB%93%9C).

### Response example

The response example is as follows:

```
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_9d507b3************c4394e7654c" entityID="https://sso.ncloud.com/tenants/bc1fb745-****-****-****-9fc9f7c16369">
  <md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MII******************vkhgLE=</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.ncloud.com/tenants/bc1fb745-****-****-****-9fc9f7c16369/saml/acs" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.ncloud.com/tenants/bc1fb745-****-****-****-9fc9f7c16369/saml/acs" index="1"/>
  </md:SPSSODescriptor>
</md:EntityDescriptor>
```