Metadades SAML 2.0 IdP

Aquí hi ha les metadades que SimpleSAMLphp ha generat per a vostè. Podeu enviar aquest document de metadades a clients/proveïdors de confiança per configurar una federació de confiança.

Podeu obtenir una URL amb les metadades en XML :

https://ogs-sso.element44.net/simplesaml/saml2/idp/metadata.php

Metadades

En format XML de metadades SAML 2.0:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://ogs-sso.element44.net/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIFDzCCA3egAwIBAgIURmfB/cktKCojNep0YwoZlXhgK4kwDQYJKoZIhvcNAQELBQAwgZYxCzAJBgNVBAYTAkRFMRswGQYDVQQIDBJTY2hsZXN3aWctSG9sc3RlaW4xDTALBgNVBAcMBEtpZWwxFzAVBgNVBAoMDkVsZW1lbnQ0NCBHbWJIMR4wHAYDVQQDDBVUaW0tSm9uYXMgZkbDg8ODwrxyc3QxIjAgBgkqhkiG9w0BCQEWE0Z1ZXJzdEBlbGVtZW50NDQuZGUwHhcNMjEwNDIyMDg1MzUxWhcNMzEwNDIyMDg1MzUxWjCBljELMAkGA1UEBhMCREUxGzAZBgNVBAgMElNjaGxlc3dpZy1Ib2xzdGVpbjENMAsGA1UEBwwES2llbDEXMBUGA1UECgwORWxlbWVudDQ0IEdtYkgxHjAcBgNVBAMMFVRpbS1Kb25hcyBmRsODw4PCvHJzdDEiMCAGCSqGSIb3DQEJARYTRnVlcnN0QGVsZW1lbnQ0NC5kZTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAMaJQl1Vy918SzshdhP9gjz8BvKWpPXYhES6L7Y6Ej5tglE35tL8RLn/DM6+W5w3rZm1ZwdTVsqO8exzEDU2Zf1WzScTXGr43pCYYPDst+PYiQNwYZp2NtEkvd8vTjHbjtfTKjeUo8kqW/xmTprymvjit0mYhzrx+8x4jGYJBoHT9hDjqSbqb3aJIfgpi9onaNR5X/PujUChEeFcmRUgPmDHLzrGV9/FQXbg8dziZcmSGIyU0lPIJ81ESS2UdgDcp33V1kvIpaMvTYEMNYzUxYPe6ybC5Z4ywMxsLy5rw5gfJdUQ2Ct1vMZ3imdkxEj8pFJW1ZParLv5IKswUuTCa0/+sLga/tN6nYgtQdscM3vEJfnpOdbOk6xmnirtHxnewRbuVAXXGWdyW+qzAMsI2dHBlSlS6O79IzgqZ3/GcGqSXIxxvPUchQ9w85q38MdunELLOQrRKV+qjbrJV/qj/OyPhYRQHpQSEy8IEc4RxP9Hrbil9CBnQk+HMQ5OjEcoUwIDAQABo1MwUTAdBgNVHQ4EFgQU7yOKuCpLPx9UyaaPJrZTKljv8MwwHwYDVR0jBBgwFoAU7yOKuCpLPx9UyaaPJrZTKljv8MwwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAYEAcT3cnBzy0xis6iVRzeXQPX7trmbhL2733kLpkEM2ziXvak/PhVOa9G4wXX1x+kk4z2Js6GDc6eoGopIE7SiXondA7tYoSM0uuG0+bfRf/IaYnIyxn2zU/XWbRM8zvZ+BUt94AV+UOL85nv6uwEW1lQqPgPJHULSNotNJVpYrcTHP/IUe4GUHzVVC/kWRMY6d7VhrTyLl0tGfW/S3ul3cc+6K6Qn6zs+1KswlJWh39wKKGVXZBCylYTcKy+3HVRCySoZxnJKH+0olsE6j1vhmrzhLJf/A1hDGDZJMZtaOWfOa948/FvQnDNTXzFGAKFRaqDoyXJwatlG7Q1VEjoA1NeNYMafcTqCj9H627XUF7qtZrWNUG0eO0jzN6y+98ZEf3llU0nJ+OCYkT6FYMGpuEwu8KqvaGMbT07vJjtC8vtwFBKuu/9b0w0L5tZNCTe5jiAJ42mcZ6jSqxVggRMhu/m8rq+F9qTztM/3VUPlxsfxhv1li6h1C/9l9pmW7bKVr</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIFDzCCA3egAwIBAgIURmfB/cktKCojNep0YwoZlXhgK4kwDQYJKoZIhvcNAQELBQAwgZYxCzAJBgNVBAYTAkRFMRswGQYDVQQIDBJTY2hsZXN3aWctSG9sc3RlaW4xDTALBgNVBAcMBEtpZWwxFzAVBgNVBAoMDkVsZW1lbnQ0NCBHbWJIMR4wHAYDVQQDDBVUaW0tSm9uYXMgZkbDg8ODwrxyc3QxIjAgBgkqhkiG9w0BCQEWE0Z1ZXJzdEBlbGVtZW50NDQuZGUwHhcNMjEwNDIyMDg1MzUxWhcNMzEwNDIyMDg1MzUxWjCBljELMAkGA1UEBhMCREUxGzAZBgNVBAgMElNjaGxlc3dpZy1Ib2xzdGVpbjENMAsGA1UEBwwES2llbDEXMBUGA1UECgwORWxlbWVudDQ0IEdtYkgxHjAcBgNVBAMMFVRpbS1Kb25hcyBmRsODw4PCvHJzdDEiMCAGCSqGSIb3DQEJARYTRnVlcnN0QGVsZW1lbnQ0NC5kZTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAMaJQl1Vy918SzshdhP9gjz8BvKWpPXYhES6L7Y6Ej5tglE35tL8RLn/DM6+W5w3rZm1ZwdTVsqO8exzEDU2Zf1WzScTXGr43pCYYPDst+PYiQNwYZp2NtEkvd8vTjHbjtfTKjeUo8kqW/xmTprymvjit0mYhzrx+8x4jGYJBoHT9hDjqSbqb3aJIfgpi9onaNR5X/PujUChEeFcmRUgPmDHLzrGV9/FQXbg8dziZcmSGIyU0lPIJ81ESS2UdgDcp33V1kvIpaMvTYEMNYzUxYPe6ybC5Z4ywMxsLy5rw5gfJdUQ2Ct1vMZ3imdkxEj8pFJW1ZParLv5IKswUuTCa0/+sLga/tN6nYgtQdscM3vEJfnpOdbOk6xmnirtHxnewRbuVAXXGWdyW+qzAMsI2dHBlSlS6O79IzgqZ3/GcGqSXIxxvPUchQ9w85q38MdunELLOQrRKV+qjbrJV/qj/OyPhYRQHpQSEy8IEc4RxP9Hrbil9CBnQk+HMQ5OjEcoUwIDAQABo1MwUTAdBgNVHQ4EFgQU7yOKuCpLPx9UyaaPJrZTKljv8MwwHwYDVR0jBBgwFoAU7yOKuCpLPx9UyaaPJrZTKljv8MwwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAYEAcT3cnBzy0xis6iVRzeXQPX7trmbhL2733kLpkEM2ziXvak/PhVOa9G4wXX1x+kk4z2Js6GDc6eoGopIE7SiXondA7tYoSM0uuG0+bfRf/IaYnIyxn2zU/XWbRM8zvZ+BUt94AV+UOL85nv6uwEW1lQqPgPJHULSNotNJVpYrcTHP/IUe4GUHzVVC/kWRMY6d7VhrTyLl0tGfW/S3ul3cc+6K6Qn6zs+1KswlJWh39wKKGVXZBCylYTcKy+3HVRCySoZxnJKH+0olsE6j1vhmrzhLJf/A1hDGDZJMZtaOWfOa948/FvQnDNTXzFGAKFRaqDoyXJwatlG7Q1VEjoA1NeNYMafcTqCj9H627XUF7qtZrWNUG0eO0jzN6y+98ZEf3llU0nJ+OCYkT6FYMGpuEwu8KqvaGMbT07vJjtC8vtwFBKuu/9b0w0L5tZNCTe5jiAJ42mcZ6jSqxVggRMhu/m8rq+F9qTztM/3VUPlxsfxhv1li6h1C/9l9pmW7bKVr</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ogs-sso.element44.net/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ogs-sso.element44.net/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:fuerst@element44.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

En un fitxer de format SimpleSAMLphp: utilitzeu aquesta opció si utilitzeu una entitat SimpleSAMLphp en l'altre extrem:

$metadata['https://ogs-sso.element44.net/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://ogs-sso.element44.net/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://ogs-sso.element44.net/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://ogs-sso.element44.net/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => 'MIIFDzCCA3egAwIBAgIURmfB/cktKCojNep0YwoZlXhgK4kwDQYJKoZIhvcNAQELBQAwgZYxCzAJBgNVBAYTAkRFMRswGQYDVQQIDBJTY2hsZXN3aWctSG9sc3RlaW4xDTALBgNVBAcMBEtpZWwxFzAVBgNVBAoMDkVsZW1lbnQ0NCBHbWJIMR4wHAYDVQQDDBVUaW0tSm9uYXMgZkbDg8ODwrxyc3QxIjAgBgkqhkiG9w0BCQEWE0Z1ZXJzdEBlbGVtZW50NDQuZGUwHhcNMjEwNDIyMDg1MzUxWhcNMzEwNDIyMDg1MzUxWjCBljELMAkGA1UEBhMCREUxGzAZBgNVBAgMElNjaGxlc3dpZy1Ib2xzdGVpbjENMAsGA1UEBwwES2llbDEXMBUGA1UECgwORWxlbWVudDQ0IEdtYkgxHjAcBgNVBAMMFVRpbS1Kb25hcyBmRsODw4PCvHJzdDEiMCAGCSqGSIb3DQEJARYTRnVlcnN0QGVsZW1lbnQ0NC5kZTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAMaJQl1Vy918SzshdhP9gjz8BvKWpPXYhES6L7Y6Ej5tglE35tL8RLn/DM6+W5w3rZm1ZwdTVsqO8exzEDU2Zf1WzScTXGr43pCYYPDst+PYiQNwYZp2NtEkvd8vTjHbjtfTKjeUo8kqW/xmTprymvjit0mYhzrx+8x4jGYJBoHT9hDjqSbqb3aJIfgpi9onaNR5X/PujUChEeFcmRUgPmDHLzrGV9/FQXbg8dziZcmSGIyU0lPIJ81ESS2UdgDcp33V1kvIpaMvTYEMNYzUxYPe6ybC5Z4ywMxsLy5rw5gfJdUQ2Ct1vMZ3imdkxEj8pFJW1ZParLv5IKswUuTCa0/+sLga/tN6nYgtQdscM3vEJfnpOdbOk6xmnirtHxnewRbuVAXXGWdyW+qzAMsI2dHBlSlS6O79IzgqZ3/GcGqSXIxxvPUchQ9w85q38MdunELLOQrRKV+qjbrJV/qj/OyPhYRQHpQSEy8IEc4RxP9Hrbil9CBnQk+HMQ5OjEcoUwIDAQABo1MwUTAdBgNVHQ4EFgQU7yOKuCpLPx9UyaaPJrZTKljv8MwwHwYDVR0jBBgwFoAU7yOKuCpLPx9UyaaPJrZTKljv8MwwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAYEAcT3cnBzy0xis6iVRzeXQPX7trmbhL2733kLpkEM2ziXvak/PhVOa9G4wXX1x+kk4z2Js6GDc6eoGopIE7SiXondA7tYoSM0uuG0+bfRf/IaYnIyxn2zU/XWbRM8zvZ+BUt94AV+UOL85nv6uwEW1lQqPgPJHULSNotNJVpYrcTHP/IUe4GUHzVVC/kWRMY6d7VhrTyLl0tGfW/S3ul3cc+6K6Qn6zs+1KswlJWh39wKKGVXZBCylYTcKy+3HVRCySoZxnJKH+0olsE6j1vhmrzhLJf/A1hDGDZJMZtaOWfOa948/FvQnDNTXzFGAKFRaqDoyXJwatlG7Q1VEjoA1NeNYMafcTqCj9H627XUF7qtZrWNUG0eO0jzN6y+98ZEf3llU0nJ+OCYkT6FYMGpuEwu8KqvaGMbT07vJjtC8vtwFBKuu/9b0w0L5tZNCTe5jiAJ42mcZ6jSqxVggRMhu/m8rq+F9qTztM/3VUPlxsfxhv1li6h1C/9l9pmW7bKVr',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'fuerst@element44.de',
            'contactType' => 'technical',
            'givenName' => 'Administrator',
        ],
    ],
];

Certificats

Baixeu els certificats X509 en format PEM.

idp.crt