SAML 2.0 IdP metaandmed

Need on SimpleSAMLphp poolt sulle genereeritud metaandmed. Võid saata need metaandmed usaldatavatele partneritele usaldatava föderatsiooni loomiseks.

Metaandmete XML-i on võimalik saada spetsiaalselt aadressilt:

https://idp.univet.hu/simplesaml/saml2/idp/metadata.php

Metaandmed

SAML 2.0 metaandmete XML-vormingus:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.univet.hu/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.univet.hu/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.univet.hu/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:zsohar.roland@univet.hu</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formaadis: kasuta seda siis, kui ka teine pool kasutab SimpleSAMLphp-d:

$metadata['https://idp.univet.hu/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://idp.univet.hu/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://idp.univet.hu/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://idp.univet.hu/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'zsohar.roland@univet.hu',
            'contactType' => 'technical',
            'givenName' => 'Administrator',
        ],
    ],
];

Sertifikaadid

Lae alla X509 sertifikaadid PEM kodeeringus failidena.

idp.crt