# FaceSign SAML IdP

> Add FaceSign step-up verification to any SAML service provider.

## Docs

- [FaceSign SAML IdP](https://idp-docs.facesign.dev/overview.md): Add FaceSign step-up verification to any SAML service provider. Standard SAML 2.0 — configuration, not custom code.
- [Quickstart](https://idp-docs.facesign.dev/quickstart.md): Import the metadata, register your service provider, and run a real round-trip.
- [Configure your service provider](https://idp-docs.facesign.dev/configure-your-service-provider.md): The two values that register an SP, what activates immediately, and what a person actually experiences.
- [SAML request contract](https://idp-docs.facesign.dev/saml-request-contract.md): What FaceSign accepts, what it returns, and what your service provider must check before it trusts either.
- [Validate responses](https://idp-docs.facesign.dev/validate-responses.md): Everything your service provider must check before it trusts a FaceSign response.
- [Test the live sandbox](https://idp-docs.facesign.dev/test-the-live-sandbox.md): Exercise a real SP-initiated SAML round-trip against FaceSign's own loopback service provider.
- [Troubleshooting](https://idp-docs.facesign.dev/troubleshooting.md): Concrete errors from the SSO endpoint and the verification flow, and what each one means.
- [Security and operations](https://idp-docs.facesign.dev/security-and-operations.md): Fail-closed semantics, the limits your service provider must design for, and our assurance posture.
- [Silverfort Bridge pilot](https://idp-docs.facesign.dev/silverfort-bridge-pilot.md): Partner-specific onboarding for the Silverfort Bridge integration, kept separate from the generic SAML documentation.

## OpenAPI Specs

- [openapi](https://idp-docs.facesign.dev/openapi.yaml)

## Optional

- [IdP metadata (XML)](https://idp.facesign.dev/api/saml/metadata)
- [Service health](https://idp.facesign.dev/api/health)
- [Loopback sandbox](https://idp.facesign.dev/test-sp)