SAML 2.0 SP Metadata

SimpleSAMLphp har har genererat följande metadata. För att sätta upp en betrodd federation kan du skicka metadata till de parter du har förtroende för.

Du kan hämta metadata i XML-format på dedicerad URL:

http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/metadata.php/sp-adfs.nov.toma.intra.intra.custompublish.com

Metadata

I SAML 2.0 Metadata XML-format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="sp-adfs.nov.toma.intra.intra.custompublish.com" ID="_2ea51264913916d76113e18d6d663b950863031a195152f5f9a7e4df46092acf"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
  <ds:Reference URI="#_2ea51264913916d76113e18d6d663b950863031a195152f5f9a7e4df46092acf"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>xZAwW6c7hK0Qp9LtZIxKCH078LThvc8k1M0KiAtDsJE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>V/xDTsDNYn7Nqgw06Yvjgq8Appo1cA07o+sFZZ2EYb2FDVth5NtQ5ldKFIUIBh1ozrroYiV1jGYmtm5PtaL5tmEd1mutkoNz0+kAc2y51CJA5QduW8BYwMtJxl7wCN26Rc570XZMa9Ur9aNsBsIEiuzNqZz/rVYgToYU/QBe7DMtGuH4oNGvE1cHm2POq2wcwp71CEMx4NfFqRTnBlzpvviHDRV4w/BVNK9ZPWf5yytyWtHCxaf+2kM/mF56241xn4MbyWIja8ycVAT8MgSRiWr4Hm2Ki9Ws2ViwpR6ObrAu79vKTMta/wHmxTBmD4PE7Hc2PVfqWgYrMmgFVtouwQ==</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-logout.php/sp-adfs.nov.toma.intra.intra.custompublish.com"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-acs.php/sp-adfs.nov.toma.intra.intra.custompublish.com" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml1-acs.php/sp-adfs.nov.toma.intra.intra.custompublish.com" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-acs.php/sp-adfs.nov.toma.intra.intra.custompublish.com" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml1-acs.php/sp-adfs.nov.toma.intra.intra.custompublish.com/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator (CustomPublish AS)</md:GivenName>
    <md:EmailAddress>mailto:svein@custompublish.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I filformatet för simpleSAML, använd detta detta format om SimpleSAMLphp används i mottagende sida:

$metadata['sp-adfs.nov.toma.intra.intra.custompublish.com'] = [
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-logout.php/sp-adfs.nov.toma.intra.intra.custompublish.com',
        ],
    ],
    'AssertionConsumerService' => [
        [
            'index' => 0,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
            'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-acs.php/sp-adfs.nov.toma.intra.intra.custompublish.com',
        ],
        [
            'index' => 1,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
            'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml1-acs.php/sp-adfs.nov.toma.intra.intra.custompublish.com',
        ],
        [
            'index' => 2,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
            'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml2-acs.php/sp-adfs.nov.toma.intra.intra.custompublish.com',
        ],
        [
            'index' => 3,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
            'Location' => 'http://fredheim.skole.gran.no/sp-adfs/module.php/saml/sp/saml1-acs.php/sp-adfs.nov.toma.intra.intra.custompublish.com/artifact',
        ],
    ],
    'contacts' => [
        [
            'emailAddress' => 'svein@custompublish.com',
            'contactType' => 'technical',
            'givenName' => 'Administrator (CustomPublish AS)',
        ],
    ],
];