SAML 2.0 SP - Metadane
Tutaj sa metadane, które SimpleSAMLphp wygenerował dla Ciebie. Możesz je wysłać zaufanym partnerom w celu stworzenia zaufanej federacji.
Możesz pobrać metadane w formacie xml:
http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/metadata.php/default-sp
Metadane
W formacie SAML 2.0 Metadata XML
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/metadata.php/default-sp" ID="_b02d0574e0f254aa4f17b0b0f26cf09c52dfc28b051293d05ed37f479a657de0"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/> <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> <ds:Reference URI="#_b02d0574e0f254aa4f17b0b0f26cf09c52dfc28b051293d05ed37f479a657de0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>xG53xCG+Z70serNBqKuT+JtbR1IvQKSfoqnc9I22X08=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rOCZJyoQ+ST9rnGABET0w4uj28vDmPEoyAF2pEx76xhVkCycZPnCKPcJWOtDhQfrI9zXmZXgq/VKJArYz7aMjBpyMcA9YptqsS9B8e1SgQCv7VsTr3RsES9FS1Off950XDb2P8pdQHDkgrAFdvyfPWqUFGJYp0ASi1sW6buaNLiJmRjE78We+/cnvia6RILXXf0FvcSSI+IRjDCSXNbHgl4xlFydzPTnSj8iWhsQlSNeR74ul+Jxm/fTVnR1IjbTEuQwNBLe/VsYM2K5PuBALuNrwBSKTEJj8yI7+K7WmyUGODiMzXBe0rwRLgXDa8LTmtFqgqfx+ML4gtQv/7mObQ==</ds:SignatureValue> <ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature> <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol"> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-logout.php/default-sp"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-acs.php/default-sp" index="0"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml1-acs.php/default-sp" index="1"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-acs.php/default-sp" index="2"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml1-acs.php/default-sp/artifact" index="3"/> </md:SPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Administrator (CustomPublish AS)</md:GivenName> <md:EmailAddress>mailto:svein@custompublish.com</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/metadata.php/default-sp'] = [ 'SingleLogoutService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-logout.php/default-sp', ], ], 'AssertionConsumerService' => [ [ 'index' => 0, 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST', 'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-acs.php/default-sp', ], [ 'index' => 1, 'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post', 'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml1-acs.php/default-sp', ], [ 'index' => 2, 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact', 'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-acs.php/default-sp', ], [ 'index' => 3, 'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01', 'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml1-acs.php/default-sp/artifact', ], ], 'contacts' => [ [ 'emailAddress' => 'svein@custompublish.com', 'contactType' => 'technical', 'givenName' => 'Administrator (CustomPublish AS)', ], ], ];