SAML 2.0 IdP metadata
Her er metadata som SimpleSAMLphp har generert for deg. Du må utveksle metadata med de partene du stoler på for å sette opp en føderasjon.
Du kan nå metadata i XML-format på en dedikert URL:
https://idp.gtc.iac.es/simplesaml/saml2/idp/metadata.php
Metadata
I SAML 2.0 Metadata XML Format:
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.gtc.iac.es/simplesaml/saml2/idp/metadata.php">
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>MIIHcDCCBVigAwIBAgIRALQ5WeAx8bKB0NocBEvdBIswDQYJKoZIhvcNAQEMBQAwRDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNVBAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTI0MDMxNTAwMDAwMFoXDTI1MDMxNTIzNTk1OVowajELMAkGA1UEBhMCRVMxHzAdBgNVBAgTFlNhbnRhIENydXogZGUgVGVuZXJpZmUxITAfBgNVBAoTGEdyYW4gVGVsZXNjb3BpbyBDYW5hcmlhczEXMBUGA1UEAxMOaWRwLmd0Yy5pYWMuZXMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlgrRe3XuPiuDce9pUir+3gzfOy92jAGXktVPs2Q4IHR66Y9WXNN1OQqpbedaonv5mRtGOrhIogwS8knx4TFH5/MI2raQuqLhmkw2+tN1g7YqG2o1eF/RFlMkfxigQv1RLsGQX9pK6jC2ahBiCTZsCzq9R80X2XS5rv6Mw/0zJkW5rehCw5o7zGU2ffDEfU+77/t+iUlqh0nFHRpt2U2ue4PNVMJ1HIlKE39Br10bPiF63r6zOoaGHvjwB26Exz9FWjaV1rZnfq7GyBasb/5yydwwL/cglJWTngtaj9NYCcQn8ob7SuEAOmh5OiAL73XMUCi/mL4ISX2aZVPfb643AgMBAAGjggM1MIIDMTAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQUkZk/VeY5/JbGb2DxIbza++JiMDwwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2NzcC5zZWN0aWdvLmNvbTAtBgNVHREEJjAkgg5pZHAuZ3RjLmlhYy5lc4ISd3d3LmlkcC5ndGMuaWFjLmVzMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDPEVbu1S58r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAY5BNN2AAAAEAwBHMEUCIQDcHzRBCPOIUaDS5kVyQ8PkM3XYSAx0buPP4efzUh3azQIgZPe8zl1rdwK29kxZ9l8IuCpzuyaPv48Ua+N96K07JgEAdgCi4wrkRe+9rZt+OO1HZ3dT14JbhJTXK14bLMS5UKRH5wAAAY5BNN0kAAAEAwBHMEUCIDRk+34xY/3DVCQPkFvBJRpp/69spVeDpgSLhYZ7VoMfAiEAtmVQAhhdizBDJbAbixl/ahzL3sSfBtMCbpJIvW77gZsAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY5BNN0cAAAEAwBHMEUCIQCkH7TDpxnFsawOb9DN6LHkdNDaGaJPs6q7ShYhnprFSQIgV/w18PwxhdnZ1nSoMW3XwqkV32vvrVKZsSvMjpcLa0AwDQYJKoZIhvcNAQEMBQADggIBAGfgAtDnrJxHkvv8mj1otXgndARiiKFvHlVRskIjwU4G+3balYLhzNIYScinWcuv/PmkYBA7H88GYtzXkNMsrnOapzELX7dseM0tA+Jc1KDsbfIqhaj11dp80B8X2Rg/nZWRnAWJN2dFWbyc1p0oMektBFyePF1fOIhVq1Aev4plO/gBEE9Tic+WFQnsOxeJncQp6BDYzCJXo+pJVSSlyt+Ya4H7zbMJ1xjWHS6BtMMxpdwSO92XxMG/Vla9lFdn5X0vXaLAKAMVAB09VbCYlTgsyORiJFVKbQes2B5LXIgp5Zn+ijEqA2Os18XjRUoNU5vmE55/uyF9o38u4t8hCkfvumtGQlSBCHHCr2U1bosyQSZBPgUW5Kl4cfS4Hsa/NJ/CUj1X8ubvhs5dbebEJnN/n+JCZMbuUb5lyrkpGPH75lqPJ0MeBIsv9IvgNiaZxIPXGkC+EJ5o9bGLivJd2wxHfL4/M7/bhfz7UB6zuSpjIeO9koqHsI8dt1cwj1mRYgX0zXY0BAV2Lw4ORx5wC8Chlhh4jWpx4u65WMbThAPLkmhWJMej8j/N2ne40majMNuvaaNCxaWW2GVxTMs6OaMVndiUrNPa4SXu2z2UGam0q3Ei4l7xkmDT0f70j5xijVlbo3gY6buI6tpZ59jdPyjaJiUryGJqmE6rrCKJImbU</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.gtc.iac.es/simplesaml/saml2/idp/SingleLogoutService.php"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.gtc.iac.es/simplesaml/saml2/idp/SSOService.php"/>
</md:IDPSSODescriptor>
<md:ContactPerson contactType="technical">
<md:GivenName>Administrator</md:GivenName>
<md:EmailAddress>mailto:easi@gtc.iac.es</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
I SimpleSAMLphp format - bruk denne dersom du benytter SimpleSAMLphp i den andre enden:
$metadata['https://idp.gtc.iac.es/simplesaml/saml2/idp/metadata.php'] = [
'metadata-set' => 'saml20-idp-remote',
'entityid' => 'https://idp.gtc.iac.es/simplesaml/saml2/idp/metadata.php',
'SingleSignOnService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://idp.gtc.iac.es/simplesaml/saml2/idp/SSOService.php',
],
],
'SingleLogoutService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://idp.gtc.iac.es/simplesaml/saml2/idp/SingleLogoutService.php',
],
],
'certData' => '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',
'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
'contacts' => [
[
'emailAddress' => 'easi@gtc.iac.es',
'contactType' => 'technical',
'givenName' => 'Administrator',
],
],
];
Sertifikater
Last ned X509-sertifikatene som PEM-filer.
