SAML 2.0 IdP Metaadatok

Ezeket a metaadatokat a SimpleSAMLphp generálta. Ezt a dokumentumot küldheti el föderációs partnerei számára.

A következő címről töltheti le a metaadatokat:

https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metaadatok

SAML 2.0 XML formátumban:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDaTCCAlGgAwIBAgIRAMIFdYl7ZpGHqIJXo2SPkwEwDQYJKoZIhvcNAQELBQAwJDEiMCAGA1UEAwwZUlYtVG9vbCBUZXN0IEludGVybWVkaWF0ZTAeFw0yNjA4MTMxNDMyMTVaFw0yNjEyMTExNDMyMTVaMBcxFTATBgNVBAMMDHJ2LXRvb2wtc2FtbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnayGc+jAq5nMuLjP+/jgZX+l+GnFHE/4e/IdWN9Dx+bQSOkw1+aF2IjqIv44aiAcz8iehhxONFV41BUvEE0sDl3t+YIW10/Nsm3a18wKMO4mbhW2gs+ExTj9uXIrNk8hocfycm3vuRGD/R6OuK++z5+v7cOh/ZwauUGO9iupQet9BxZbXHgS/pdin8KR1hECVDv6OPsDqe3saOO7Aa3FHzlB5q7R9ZoGsVU8vDHeOOy5gZZrrtALXt7QLwtFZBwhR0D1m+j13+wK3uTkshFuoa51kW0tUGbCZLi3bVvANUERu8aFrTFSFJXXXRk2haCVPbZVdhGjliqL5vZmJsvb0CAwEAAaOBojCBnzAJBgNVHRMEAjAAMB0GA1UdDgQWBBRpJY1q6aHYuNdTdhmDm8ZmcQGkpDBRBgNVHSMESjBIgBT8D1xXwS7PL0F5pQSDVxpWqKNroKEepBwwGjEYMBYGA1UEAwwPUlYtVG9vbCBUZXN0IENBghB8U9pXt2syctB6/bENV1X2MBMGA1UdJQQMMAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAQEABslsaayl0ViK3tyoyNCCmU0Q/bf3C1kQ2+8vChQlSuWpIrTQL1sX39PeePj6J8nXEO0z15TVd62ThDm9c+umefDsz6syENxfw02JXraoWlha5QyPu8mKMU6aA8270GbmsVP+lF1Ss9EL3ez/gtarut1wcmxKbFYWznOyK8IQhZXsZQ7A5iYMYGz2rp8v6IcHo4fGtkC/ij80Qwxs2y9zKwSe/fQY7dFHfIuYfjcjrQEdo9FQro0OQbqcb/ooIjZ6XAJ5y2HNDGvUF6RYsXqO7Xc1RqQDj3yKW7b+JXsEgW3bbA8D38/DT0r2jcup9O9wB+0piOP+b9LkqcSly0s1pw==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp fájl formátumban - akkor használható, ha a másik oldalon SimpleSAMLphp van:

$metadata['https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Tanúsítványok.

PEM formátumú X509 tanúsítvány letöltése.

idp.crt