privacyIDEA SAML adds two factor authentication to the Univention SAML (SSO) service. Authentication is done via privacyIDEA. The privacyIDEA service can be installed on any other member server in your network.

Use the following UCR variables to configure privacyIDEA SAML:

• privacyidea/saml/url This is the URL, where your privacyIDEA server is located. Can be "https://yourserver/privacyidea".
• privacyidea/saml/enable Set this to "True" to activate OTP for SAML.
• privacyidea/saml/verifypeer Set this to "True" to check the SSL certificate of the privacyIDEA server.
• privacyidea/saml/verifyhost Set this to "True" to check the hostname in the SSL certificate of the privacyIDEA server.