SAML 2.0 IdP Metadatuak

Hona hemen SimpleSAMLphp-ak zuretzat sortu dituen metadatuak. Metadatuen dokumentu hau konfidantzazko zure kideei bidal diezaiekezu federazio bat konfiguratzeko.

xml metadatuekin URL bat eskura dezakezu:

https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metadatuak

SAML 2.0 metadatuetako xml formatuan:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formatuko fitxategi batean - beste muturrean SimpleSAMLphp entitate bat erabiltzen ariz gero, erabil ezazu aukera hau:

$metadata['https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Ziurtagiriak

X509 ziurtagiriak PEM formatuan deskargatu.

idp.crt