SAML 2.0 IdP Metapodatki

Tu so metapodatki, ki jih je generiral SimpleSAMLphp. Dokument lahko pošljete zaupanja vrednim partnerjem, s katerimi boste ustvarili federacijo.

XML metapodatki se nahajajo na tem naslovu:

https://test.saml.uvt.nl/saml2/idp/metadata.php

Metapodatki

V SAML 2.0 Metapodatkovni XML format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://test.saml.uvt.nl/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIG1TCCBT2gAwIBAgIQC1gWjLv/Tdp+MYqxtH5lnTANBgkqhkiG9w0BAQsFADBgMQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDQTEYMBYGA1UEAwwPR0VBTlQgVExTIFJTQSAxMB4XDTI1MTEyNTE1MzkyNFoXDTI2MTEyNTE1MzkyNFowVjELMAkGA1UEBhMCTkwxEDAOBgNVBAcMB1RpbGJ1cmcxGzAZBgNVBAoMElRpbGJ1cmcgVW5pdmVyc2l0eTEYMBYGA1UEAwwPbHVuYXRvbmUudXZ0Lm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F6ZZpR0tKJoJEuXmkqVzYAHErtwGBCfP4/7ZRYq+hZei+rcISI9y55jNKuAebV4wuIs+YXO/9OWiuP/B1A6MQIbDF2NhyYpCflwWFnHmsZzNqWHb5vGuzAy6qZyY0h4tRSmobo+kM2Er4uM3AwUlHu15HjweKNopSit4Kn5T7EFguLNr5XWvHcRdpLboJ9G+32c1OoDydjc84FCvqw0wY3jYKJoHVtL3G67rH3RAVBC3IrOc38mNqeEhdXcaN0qF08XJq9oTU6A9I1DtXMgD5Hox1VrjVmJRRCo0NUZ+NXfO8Y7YtHKskJwIsJCSxHyx2vzXvGqai6cLO+dwAqVJQIDAQABo4IDEzCCAw8wHwYDVR0jBBgwFoAUhgFyP4ypcOIxBlMWzgFfW3nIPDswbwYIKwYBBQUHAQEEYzBhMDgGCCsGAQUFBzAChixodHRwOi8vY3J0LmhhcmljYS5nci9IQVJJQ0EtR0VBTlQtVExTLVIxLmNlcjAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AtdGxzLmhhcmljYS5ncjA9BgNVHREENjA0gg9sdW5hdG9uZS51dnQubmyCEHRlc3Quc2FtbC51dnQubmyCD3Rlc3Quc3NvLnV2dC5ubDAtBgNVHSAEJjAkMAgGBmeBDAECAjAIBgYEAI96AQcwDgYMKwYBBAGBzxEBAQECMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtR0VBTlQtVExTLVIxLmNybDAdBgNVHQ4EFgQUYo/q7BryS4gmHj3Jk74T9CIgWVUwDgYDVR0PAQH/BAQDAgWgMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCvZ4g7V7BO3Y+m2X72LqjrgQrHcWDwJF5V1gwv54WHOgAAAZq7tJYGAAAEAwBHMEUCIH9g31K9PoKGHEIzIqqE2DOMeUfYYO2Eo/2GpLHyX9eoAiEAi0B/ceXspOA6CPsreaPR2j9l3xxSEZrOXUqnoWJVV3UAdgDYCVU7lE96/8gWGW+UT4WrsPj8XodVJg8V0S5yu0VLFAAAAZq7tJXNAAAEAwBHMEUCIGVIg469VtIvTY1YbliaJTfZSauWLO8YaI7ZMS8OnmEfAiEA66LohFD0IPfsRyqVRUBO3aOq8rtqP+ADpBjAj3Pz6ewAdgCsqzBwbOvshDH0E9L0kV8RHkIkQ7HypoxPPCs7px4CwwAAAZq7tJXwAAAEAwBHMEUCIQDw8ceKL1oNhDdn5//vz6m9XbEFNQBNfEBouNkEsdju5gIgWN5qZrRmx/jyyEhmg68etO54zQVoyoi+ByYXRYpTn3owDQYJKoZIhvcNAQELBQADggGBACSjQ5mC/QaPWbiaUYv+p0Mz9rf3vKfUYQSIn+cspeiDu/883NyAnKxEugwSK7FPyrJKLU9qIm7snOfhMLb48XkWl8+eYz2qRLq8VGccvQAYSbXOWAWtm9zGtqLcUzjWriPm9j+edUWsNUwm8LMkZOe5uwkbUS1IDX0g1kKicp4YMCgQaPPYBytmqDcceMLbvXxfKqfLDX5sSZy5qaE0VFGiJ/diM3pZm0i1earP99vVsnou2GKO8D0w6pMwGViCd3Oa550nSr9oJ+ywGZ95DSSP4dz9T/g4aClZp9SCb9eemRUmDkC6GS8pmapLVlu7EoLotlREMrbuPotAV2NamUe6QigatxLXOMytm1E0DBj0t9X+NkOhy7slhUNp6EcXw9xi+6cUbdXcSljEXj22eWTyIHH8I1yaxV0u6O5pMLeHELgWgoUijuvAvQ2C09AAb/Uc29AFpvstqkfLyaLoWxze5fiCM28N0lbIhbTQWDh0eiONkbmA861UIw6udJOdTA==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://test.saml.uvt.nl/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://test.saml.uvt.nl/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">Tilburg University (TEST)</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">Tilburg University (TEST)</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://www.tilburguniversity.edu</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="technical">
    <md:GivenName>LIS Infrastructure Unix</md:GivenName>
    <md:EmailAddress>mailto:noreply@uvt.nl</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

V SimpleSAMLphp "flat file" formatu - ta format uporabite, če uporabljate SimpleSAMLphp entiteto na drugi strani:

$metadata['https://test.saml.uvt.nl/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://test.saml.uvt.nl/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://test.saml.uvt.nl/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://test.saml.uvt.nl/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'OrganizationName' => [
        'en' => 'Tilburg University (TEST)',
    ],
    'OrganizationDisplayName' => [
        'en' => 'Tilburg University (TEST)',
    ],
    'OrganizationURL' => [
        'en' => 'https://www.tilburguniversity.edu',
    ],
    'contacts' => [
        [
            'emailAddress' => 'noreply@uvt.nl',
            'contactType' => 'technical',
            'givenName' => 'LIS Infrastructure Unix',
        ],
    ],
];

Digitalna potrdila

Prenesi X509 digitalno potrdilo v PEM datoteki.

idp.crt