F5 APM as IdP (no SSO) configuration

Hello Friends,

 

I need to configure F5 APM as identity provider for request from an external service provider(providing SSO). We will have our active directory server as the authentication server. I have read through the process of configuring SP connectors, IdP services, virtual servers, access profile and access policy on F5 APM. Configuration part is fine but I have a query regarding generation of metadata file from F5 as IdP along with the certificate and share it with the external service provider. My queries in this scenario are: -

 

1. How do I create and export a metadata file from F5 APM as IdP so that I can share it with the external party managing the service provider?
2. How do I generate a certificate on F5 APM as IdP that I need to share with the service provider?
3. Do I get the option to generate metadata file and certificate after configuration of IdP services and SP connectors?

A step by step procedure if available, will be of great help.

 

Thank you.