SAML 2.0 IdP - Metadane

Tutaj sa metadane, które SimpleSAMLphp wygenerował dla Ciebie. Możesz je wysłać zaufanym partnerom w celu stworzenia zaufanej federacji.

Możesz pobrać metadane w formacie xml:

https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metadane

W formacie SAML 2.0 Metadata XML

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDaTCCAlGgAwIBAgIQGBmcknqIQRnhfcI9SN00qzANBgkqhkiG9w0BAQsFADAkMSIwIAYDVQQDDBlSVi1Ub29sIFRlc3QgSW50ZXJtZWRpYXRlMB4XDTI2MDYxNTEzNDkwNloXDTI2MTAxMzEzNDkwNlowFzEVMBMGA1UEAwwMcnYtdG9vbC1zYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDNdakCiFTgxMkAZXRNQTZQZzg3pzFkrx3zO309wGQlHMqCw5754SpHpD4HfQPmIHEKQCRhi8Uccb+6wXlTqr/9nL9fzEHZzAvfMDLjggPHdjZtvWlKa8mz8iePDg6Ff136DkZlhw71HFdwZeu1lUpisMLFVMS1+vT4+F/bg/qhP+wAoYqSwAQrxDOcv0z8wBbGLHXQz4QFn0jYF7RPeTge2hKsgMR0AHXEFuVn1ujEumxI402LLwhdkZ7bEOtKL+cOwlCJn57asrx2nGK+ek74RDDHXV/1IpqSJnrOem9J0UHLZjhq3Xj3ftJoGSEcb26QmMIqhTBbjKshHzn+oLQIDAQABo4GjMIGgMAkGA1UdEwQCMAAwHQYDVR0OBBYEFNyV28VUCqvwDyyAr+o7untCjCHGMFIGA1UdIwRLMEmAFGrZq6qUJ7JBnodjVEtMA/raRckuoR6kHDAaMRgwFgYDVQQDDA9SVi1Ub29sIFRlc3QgQ0GCEQD5xl+AdMsCYXEaVE6Rl0GEMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAQEAGCkYIwNk5hoheqk3ngcXJf952uUJcnGmM40nge+D9Lb6l5mzzvp1ddLIAi4pqugXGkWfJ/NYT8UlC+BxRbab4rA9+3NoYiKAq4lRj6lZWn+C4xkt2OeEJI6EFAz03LFM28tutJPPevanHwg7yG5GEzBVYR4HL/nHYUrGARrmZ/Ia9sJ3KY8h1AnovffPwzbxNY6G8Dg6HsZvz0bX8gI6QcEwXQbFf3UNzIQCcoz3SOBWt3zytwrApY93P0TiI5t4pwlOrSxj1E51ViXLRXCW5D64wp+t/h4wox01y7EZXykDOTXzCmY4AFg2rtPckyOde13s33pAJxsTEdPzW5kIDA==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Im SimpleSAMLphp flat-file Format - verwenden Sie das, falls auf der Gegenseite eine SimpleSAMLphp-Entität zum Einsatz kommt:

$metadata['https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.develop.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Zertifikate

Die X509-Zertifikate als PEM-kodierte Dateien herunterladen.

idp.crt