Métadonnées d'IdP SAML 2.0

Voici les métadonnées générées par SimpleSAMLphp. Vous pouvez les envoyer à vos partenaires de confiances pour construire une fédération d'identité.

Vous pouvez obtenir ces métadonnées XML depuis une URL dédiée:

https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Métadonnées

Au format XML de métadonnées SAML 2.0

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Au format à plat SimpleSAMLphp - à utiliser si vous avez une installation SimpleSAMLphp sur la partie adverse :

$metadata['https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Certificats

Télécharger les certificats X509 en tant que fichiers encodés PEM.

idp.crt