SAML 2.0 IdP Metapodatki

Tu so metapodatki, ki jih je generiral SimpleSAMLphp. Dokument lahko pošljete zaupanja vrednim partnerjem, s katerimi boste ustvarili federacijo.

XML metapodatki se nahajajo na tem naslovu:

https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metapodatki

V SAML 2.0 Metapodatkovni XML format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

V SimpleSAMLphp "flat file" formatu - ta format uporabite, če uporabljate SimpleSAMLphp entiteto na drugi strani:

$metadata['https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => 'MIIDaTCCAlGgAwIBAgIRAKDCJzYkdmKXAl8aEN7dpXIwDQYJKoZIhvcNAQELBQAwJDEiMCAGA1UEAwwZUlYtVG9vbCBUZXN0IEludGVybWVkaWF0ZTAeFw0yNjA0MTUxNDQ0MTVaFw0yNjA4MTMxNDQ0MTVaMBcxFTATBgNVBAMMDHJ2LXRvb2wtc2FtbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN45qX8YiogPi4L9rRiRDj/+FKHDUshe1NOd3Idd328YIkLyuQPSl4/+nUwKG7UikGyMQUPuPdOAY9d/QwSp6j2L21knBak2lgvmtznNiO2CGRZUx37vHcfuRVwc6T5BrkwoUq+MLjkcCMFCKDo78eR23YhOYX9Iv82diCS6XYV8+6Zqy2rrnaMju+4QHACn+jUOVwkQ94v65MYjkscgmQykKipEqAP8gAUacRl2a6MnVjCIvZrEE0LU1r+Uf3qifPIfmn2mTrddiB/Ut3fVb3eCwtnkGNaoRjnrXMZ8VoQuRV2hzoks+++9/UtSJWmKl6hQiGofvRqY5JALU62gm00CAwEAAaOBojCBnzAJBgNVHRMEAjAAMB0GA1UdDgQWBBTpqZ7rXF8+dYr08pdAhQpeRleRPjBRBgNVHSMESjBIgBQ0xJMR/d1WKBrQDGTEoE3XFIqB3aEepBwwGjEYMBYGA1UEAwwPUlYtVG9vbCBUZXN0IENBghA8yKIfG5vVjKXRpUnI5ZBBMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAQEAXXkRTJmoI3Rr/2tTiAn50XjUEY/LnHfliMEBbVl5Vg7RlSzG+4AjHDMod0nNg5Hsc4d5JQ/BJ81qb/7vHS4eZXbKxQofpT04MDFdin4gWwsgjvTeeCZWEK76nmziEoRREBle8qt3wyhkT2yj4d8ImMAg7QFeHnDP9pQGOd15Oz+Ks317+Z8swagFcDknm3TOOCzCi/Spf/FdASa+5h3HiuUSYQDv6CBMfH2u/stt1wNVOweBfPmuwydI7RO/u8iIIUzDwyHeMK76IHOWnHHHFmRhSiKJWOYVsZE0y4k45P/INTMeU8/jJvHiDKte0tFc19CnRBQtEB3seHtn+aBLWQ==',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Digitalna potrdila

Prenesi X509 digitalno potrdilo v PEM datoteki.

idp.crt