SAML 2.0 IdP Metadata

Her er metadata generert av SimpleSAMLphp for deg. Du kan senda dette metadata-dokumentet til dine partnarar, slik at de kan setja opp ein tillitsføderasjon.

Du kan få metadata i XML på ein URL:

https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metadata

På SAML 2.0 metadata XML-format

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

På flat fil for SimpleSAMLphp. Bruk denne dersom du bruker SimpleSAMLphp på andre sida:

$metadata['https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Sertifikat

Last ned X509-sertifikat som PEM-koda filer

idp.crt