# SamlConfigRequest
## Properties
**idp_metadata_url** | Option<**String**> | URL to fetch the IdP's SAML metadata from (fetched server-side, SSRF-guarded). Provide this or idp_metadata_xml. | [optional]
**idp_metadata_xml** | Option<**String**> | the IdP's SAML metadata XML, pasted directly. Provide this or idp_metadata_url. | [optional]
**name_id_format** | Option<**String**> | | [optional]
**enabled** | **bool** | |
**allow_idp_initiated** | Option<**bool**> | accept unsolicited (IdP-initiated) SAML responses, e.g. from an Okta \"My Apps\" or Entra app-launcher tile. Defaults to false when omitted. Unsolicited responses carry no InResponseTo, so they cannot be bound to a login this SP started and remain exposed to login-CSRF / session fixation (#589) — enable only if your IdP offers no SP-initiated entry point. | [optional]
[[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)