SAML 2.0 identitetsudbyders metadata

Her er det metadata, som SimpleSAMLphp har genereret. Du kan sende det til dem du stoler i forbindelse med oprettelsen af en føderation.

Du kan få metadata-xml her:

https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metadata

I SAML 2.0 metadata xml-format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I SimpleSAMLphp flat-file format - brug dette hvis du også bruger SimpleSAMLphp i den anden ende;

$metadata['https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Certifikater

Download X509 certifikaterne som PEM-indkodet filer.

idp.crt