SAML 2.0 IdP metaandmed

Need on SimpleSAMLphp poolt sulle genereeritud metaandmed. Võid saata need metaandmed usaldatavatele partneritele usaldatava föderatsiooni loomiseks.

Metaandmete XML-i on võimalik saada spetsiaalselt aadressilt:

https://idp.metropolitan.hu/simplesaml/saml2/idp/metadata.php

Metaandmed

SAML 2.0 metaandmete XML-vormingus:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.metropolitan.hu/simplesaml">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.metropolitan.hu/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.metropolitan.hu/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Hrubeczky</md:GivenName>
    <md:SurName>&#xC1;kos</md:SurName>
    <md:EmailAddress>ahrubeczky@metropolitan.hu</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formaadis: kasuta seda siis, kui ka teine pool kasutab SimpleSAMLphp-d:

$metadata['https://idp.metropolitan.hu/simplesaml'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://idp.metropolitan.hu/simplesaml',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://idp.metropolitan.hu/simplesaml/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://idp.metropolitan.hu/simplesaml/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => 'MIIDwjCCAqqgAwIBAgIJAP7SK/CmIsP6MA0GCSqGSIb3DQEBCwUAMHYxCzAJBgNVBAYTAkhVMQ0wCwYDVQQIDARQZXN0MREwDwYDVQQHDAhCdWRhcGVzdDEnMCUGA1UECgweQnVkYXBlc3RpIE1ldHJvcG9saXRhbiBFZ3lldGVtMRwwGgYDVQQDDBNpZHAubWV0cm9wb2xpdGFuLmh1MB4XDTE5MTAxNDE3NDA1OFoXDTI5MTAxMzE3NDA1OFowdjELMAkGA1UEBhMCSFUxDTALBgNVBAgMBFBlc3QxETAPBgNVBAcMCEJ1ZGFwZXN0MScwJQYDVQQKDB5CdWRhcGVzdGkgTWV0cm9wb2xpdGFuIEVneWV0ZW0xHDAaBgNVBAMME2lkcC5tZXRyb3BvbGl0YW4uaHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEbJmfgYRZ4BdTC+Og4jxyKiOuHIlS9dcW9Hl5cPWUQZ/5t2UldsG2NsE906o46eQ4Tefuj1rPceJv591mqEhTjnDvX/NrKobGLI51rVIAWSeyxqdv7wKT1ctATHFDxP9SOS3B5eWHwy+HMGkTU6jUOt92e+vRpGfcuwmJ+s8Q5NXv6C6X7xYp+ApKlsuaHGLGjnnuR30xhznyaxWytWpdChRt940a5FWvWdA6gMx3LVJeCM38JfEsSnT2WY8NoTa5uN8Mw7niDRcZVOv8Cjfw9Z+jDttWCZhzmhl16E5h0SHdCnpIOIFJgl+4v9ejU//kCHrLJisBupA6hw7V4b7AgMBAAGjUzBRMB0GA1UdDgQWBBSRvMwHB5WS4CbyyCKh6pqAZWiyJDAfBgNVHSMEGDAWgBSRvMwHB5WS4CbyyCKh6pqAZWiyJDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCFb7XzNWZgO38pTDvcWm5v5vQRq7RIVyMIIQkOtJP5GKNaw9e/MO9HxKpo+psTReFwimArQgqeBVPlF8iCpdzzWbfojECYqq9LcmzeSi6oW0yQx7RO8lbQIAVyVWcdAivY8xImgRnec/O3XZr94iCJ4wTtaZo0G7RRReTrpj+DIQ//uyVazGjTrFMCj6/RNQyjejkgipKc7ozmrJqNgDe3xuERrB3LjRYEiHHS7kQ42nqDWY5fP3IO9SUdSvgx+CfmFTupuHOXaZ3FG+hpc/4xIrjZL5Qz13SjfPOqCVwlQhvxUEqsMTmveNr6Df7Qegu6aFzpLNwJbPRo+RsXOU7r',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'ahrubeczky@metropolitan.hu',
      'contactType' => 'technical',
      'givenName' => 'Hrubeczky',
      'surName' => 'Ákos',
    ),
  ),
);

Sertifikaadid

Lae alla X509 sertifikaadid PEM kodeeringus failidena.

idp.crt