Metadata and Metadata endpoint URL are the information required when integrating with a groupware (IdP) to use SSO.
When configuring, you need to register either a metadata file (XML) or a Metadata endpoint URL.
Overview of Metadata and Metadata Endpoint URL
Metadata
This is data that consolidates the configuration information required for SAML authentication (SSO integration) into one place. It mainly contains the following information to securely exchange authentication information between systems.
Entity ID: A unique name used to identify the service (IdP/SP)
Single Sign-On URL: The URL to which authentication requests are sent
Public key (certificate): Data used to verify that the transmitted data is legitimate
Metadata Endpoint URL
This is a dedicated URL that makes the configuration information (metadata) described above accessible from external systems.
Differences Depending on the Metadata Registration Method
If you configure the settings by uploading a metadata file, the administrator must manually re-upload a new file whenever the certificate is renewed.
If the update is not performed, SSO login will become unavailable once the certificate is Expired.
Related: Re-upload SAML Metadata on Renewal (Web Browser)
https://teachme.jp/8/manuals/51167243
On the other hand, if you integrate using a Metadata endpoint URL, the Teachme series will automatically retrieve the latest information from the URL even when the Expiration Date of the certificate included in the metadata is renewed.
Therefore, no manual update is required.
FAQ
Q. Is a certificate file different from metadata?
A. Yes, they are different.
A certificate file (.cer / .crt) is one of the elements that make up metadata, and it is the public key data used for verification.
A common misconfiguration is uploading only the certificate file instead of the metadata, but the integration will not be completed because the necessary configuration information is insufficient.
Be sure to register either a metadata file (XML) or a Metadata endpoint URL.
Q. I am using a Metadata endpoint URL. When the certificate on the IdP side is renewed, will it be reflected immediately?
A. No, it will not be reflected immediately.
The timing at which the latest information is automatically retrieved depends on the "cache settings on the IdP side," and if not specified, it may take up to one month at most.
Therefore, if you delete the old certificate immediately after switching to a new certificate on the IdP side, you will be unable to log in until the information is synchronized.
To prevent login errors, if the IdP allows multiple certificates to be registered, keep both the old and new certificates active, and delete the old certificate only after the Teachme series has completed its automatic retrieval (up to one month).
If you are unable to register the old certificate, disable the Single Sign-On Settings on the Teachme series and then configure the Single Sign-On Settings on the Teachme series again.
▼Disable Single Sign-On Settings (Web Browser)
https://teachme.jp/8/manuals/51167200
▼Configure Single Sign-On (Web Browser)
https://teachme.jp/8/manuals/51167186
Reference: Check SAML Configuration Information (Web Browser)
https://teachme.jp/8/manuals/51167167