Metadatos IdP SAML 2.0
Aquí están los metadatos que SimpleSAMLphp ha generado. Puede enviar este documento de metadatos a sus socios de confianza para configurar una federación.
Puede obtener una URL con los metadatos xml:
https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php
Metadatos
En formato xml de metadatos SAML 2.0:
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>MIIDaTCCAlGgAwIBAgIQJncgtT0tQEJBWF9DFYBSXzANBgkqhkiG9w0BAQsFADAkMSIwIAYDVQQDDBlSVi1Ub29sIFRlc3QgSW50ZXJtZWRpYXRlMB4XDTI2MTAwNzA5MzMxMVoXDTI3MDIwNDA5MzMxMVowFzEVMBMGA1UEAwwMcnYtdG9vbC1zYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpqLeDHpTYL63LbwH1BEbybZjfZ9B+J/MHk3DAHn+b52QVYTMreJdOJqG7TzkvUX0nPMqS5UXm/Bex9QKun157Ho13GcnlTdvxe8W4icII0vRkzFwqNYd5Dg4jpRR20xuAvYyJxJNExXZC3x40qw2AFUvNo1fymSwzkQOa234p6uyWnt4o1T11VPjbZoqsQq0pwFHvMLkq+vgg7hDCZOBBY/OmTbvrWa5gbsapzvMEo+Zg0EzeAM8F4SBFHbHUHVY8SwEvaQdo/GXIKoGTj7MzIkOj8/WdsgjH7qPsDaR9NSggcov2nVdhfYsw0JgMrvRlXnroWQqFMjUzZ/leCMoQIDAQABo4GjMIGgMAkGA1UdEwQCMAAwHQYDVR0OBBYEFCigKrbMQJ07pbWDTZJ7aIuvoecYMFIGA1UdIwRLMEmAFN0kSdQz8WG7vLB1KY10lFLe/mEwoR6kHDAaMRgwFgYDVQQDDA9SVi1Ub29sIFRlc3QgQ0GCEQDH0nYF8DSLSLIqfd64684bMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAQEAbJWXyAzC1AUTY7Ney1xdqEj8umeZTxfPyQTnjFDcVhlbkWECz3W7p3wOPCWf4Cm7tV/BtmqEC2VkeD+6YUamWCpdCsgEhs0ds5InWDwTclFoMaFqG5U7qYdWHfsiHVanLFjWYBYUVBBHa8Hia6r8dbiiwOx88FlJCPTI0nc2UeXrej1hQGNIQcI9jJ0qeqkkA2qEwjdW3NNMNnw315/6d5RIlFvrlOngqBAI6A19gl/CypdhERh+I0VmpRg2Rm+vrGzlZn7kKuy9j+OBycI3vQ8q1G+ZUTMqxkc+P9Ywp06Azh+16ztlVYXKUK5vws7GbJIVOHVLcQD7ReFcRDxy3w==</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
</md:IDPSSODescriptor>
<md:ContactPerson contactType="technical">
<md:GivenName>Jan</md:GivenName>
<md:SurName>Kohnert</md:SurName>
<md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
En un fichero de formato SimpleSAMLphp - utilice esta opción si está usando una entidad SimpleSAMLphp en el otro extremo:
$metadata['https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
'metadata-set' => 'saml20-idp-remote',
'entityid' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
'SingleSignOnService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
],
],
'SingleLogoutService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
],
],
'certData' => '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',
'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
'contacts' => [
[
'emailAddress' => 'jan.kohnert@n4.de',
'contactType' => 'technical',
'givenName' => 'Jan',
'surName' => 'Kohnert',
],
],
];
Certificados
Descargar los certificados X509 en formato PEM.