SAML 2.0 identitetsudbyders metadata

Her er det metadata, som SimpleSAMLphp har genereret. Du kan sende det til dem du stoler i forbindelse med oprettelsen af en føderation.

Du kan få metadata-xml her:

https://login.saveho.com/simplesaml/saml2/idp/metadata.php

Metadata

I SAML 2.0 metadata xml-format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="idp-codepi">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.saveho.com/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.saveho.com/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:noc@saveho.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I SimpleSAMLphp flat-file format - brug dette hvis du også bruger SimpleSAMLphp i den anden ende;

$metadata['idp-codepi'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'idp-codepi',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://login.saveho.com/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://login.saveho.com/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'noc@saveho.com',
            'contactType' => 'technical',
            'givenName' => 'Administrator',
        ],
    ],
];

Certifikater

Download X509 certifikaterne som PEM-indkodet filer.

idp.crt