After you
add an identity federation,
you can configure Palo Alto Networks as a service provider by downloading
the service provider (SP) metadata from
Common Services.
The SP metadata helps you configure your identity provider integration
with Palo Alto Networks as an SP, so that you don’t have to provide
the details manually.