SAML 2.0 IdP Metadata

SimpleSAMLphp har har genererat följande metadata. För att sätta upp en betrodd federation kan du skicka metadata till de parter du har förtroende för.

Du kan hämta metadata i XML-format på dedicerad URL:

https://idp.gestcom.emf-infopro-test.ch/simplesaml/saml2/idp/metadata.php

Metadata

I SAML 2.0 Metadata XML-format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="SAML-idp">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.gestcom.emf-infopro-test.ch/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.gestcom.emf-infopro-test.ch/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>gremaudpi</md:GivenName>
    <md:EmailAddress>gremaudpi@edufr.ch</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I filformatet för simpleSAML, använd detta detta format om SimpleSAMLphp används i mottagende sida:

$metadata['SAML-idp'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'SAML-idp',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://idp.gestcom.emf-infopro-test.ch/simplesaml/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://idp.gestcom.emf-infopro-test.ch/simplesaml/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => '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',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'gremaudpi@edufr.ch',
      'contactType' => 'technical',
      'givenName' => 'gremaudpi',
    ),
  ),
);

Certifikat

Hämta X509-certifikaten som PEM-kodade filer.

idp.crt