• How to download a metadata file from Ariba?

• How do I get Ariba XML metadata to establish Single Sign-On using SAML authentication?

To download metadata/update SAML Authentication for both test and production sites, you must update from the test site only since production is in read-only mode.

• Log in to the Buyer Test realm (If Suite Integrated) or Sourcing Test realm (If Stand-alone).
• Go to Manage > Core Administration (If Suite Integrated) or Administration (If only sourcing solution exists).
• Navigate to Intelligent Configuration Manager (ICM) > Manage Configurations > Click on Continue.
• Intelligent Configuration Manager (ICM) page opens > Click on the Authentication tab from Menu section.
• You will now find the Download SAML Metadata Section for Test and Production respectively.
• Click on the Download button based on the requirement.

After logging into the system, if you see the URLs containing either "s1-2.ariba.com" or "s1-2-eu.ariba.com", it means you're using an Advanced Front Door.

Then, kindly follow the below steps,

• Download the metadata file from ICM.
• Open the metadata file and locate the certificate portion enclosed between the "X509Certificate" tags.
• Delete or cut out this certificate portion.
• Depending on whether your URL (after logging in) is "s1-2.ariba.com" or "s1-2-eu.ariba.com",
  • Obtain the certificate from our certificate repository - https://support.ariba.com/item/view/192337.
• Open the downloaded file in Text pad or Notepad++ and copy the details found between "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----".
• Paste this certificate between the "X509Certificate" tags in your metadata file.
• Update the URLs in the metadata file (Location=””) according to your downloaded certificate:
  • For "s1.ariba.com", update to "s1-2.ariba.com".
  • For "s1-eu.ariba.com", update to "s1-2-eu.ariba.com".
• Share the updated metadata file with your SSO team.

Procurement Application Services > Application Framework > Single Sign-On