# SAML Client entity descriptor

**URL:** <https://forum.keycloak.org/t/saml-client-entity-descriptor/6007>\
**Category:** Getting advice\
**Tags:** saml\
**Created:** [November 17, 2020, 7:57pm UTC](https://forum.keycloak.org/t/saml-client-entity-descriptor/6007 "2020-11-17T19:57:23Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mstaal](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/mstaal/32/1699_2.png) [@mstaal](https://forum.keycloak.org/u/mstaal)\
**Post date:** [November 17, 2020, 7:57pm UTC](https://forum.keycloak.org/t/saml-client-entity-descriptor/6007/1 "2020-11-17T19:57:23Z")

</div>

I have noticed that the Realm settings include an XML entity descriptor of the SAML API that Keycloak exposes. But should there not be a descriptor for each SAML client defined in the server configuration? Or is there always exactly one for each realm?

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [November 17, 2020, 8:40pm UTC](https://forum.keycloak.org/t/saml-client-entity-descriptor/6007/2 "2020-11-17T20:40:05Z")

</div>

Correct, there is one IDP descriptor per realm and one SP descriptor per client. Please keep in mind IDP descriptor != SP descriptor.

---

<div class="post-metadata">

**Author:** ![mstaal](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/mstaal/32/1699_2.png) [@mstaal](https://forum.keycloak.org/u/mstaal)\
**Post date:** [November 17, 2020, 8:53pm UTC](https://forum.keycloak.org/t/saml-client-entity-descriptor/6007/3 "2020-11-17T20:53:55Z")

</div>

Thanks for the reply! Can you:

1. Describe the difference between the two, or lead me to some documentation? What purpose does each of them serve?
2. How do I obtain the SP descriptor in the Keycloak interface?

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [November 17, 2020, 10:07pm UTC](https://forum.keycloak.org/t/saml-client-entity-descriptor/6007/4 "2020-11-17T22:07:47Z")

</div>

> **[SAML%2520MD%2520simplified%2520overview.pdf](https://www.oasis-open.org/committees/download.php/51890/SAML%2520MD%2520simplified%2520overview.pdf)**
>
> 2.64 MB