SAML: ACS URL and Entity ID for Firepower 2100 via FDM

[brucehunter1969]

Hi,

I am setting up SAML on a firepower 2100 to use Google workspace as an identity provider. the Google configuration asks for an ACS URL and an Entity ID for the service provider. I can find thids information anywhere on the FDM can someone please help

[gajownik · Accepted solution]

https://<fqdn>/saml/sp/metadata/<tunnel-group>

or

system support diagnostic-cli
enable
//please hit enter, password is empty
show saml metadata <TUNNEL_GROUP>

[brucehunter1969]

Hi Gajownick,

Thanks for the reply it seem like it should work but when I go show saml metadata <TUNNEL_GROUP> it returns a blank answer I am sure my input is correct and when i goto the url I get 

{"message":"Unauthorized","status_code":401}  

I cant get past this