ETN-PHF Metadati SAML 2.0 IdP
Questi sono i metadati che SimpleSAMLphp ha generato e che possono essere inviati ai partner fidati per creare una federazione tra siti.
Si possono ottenere i metadati in XML dall'URL dedicata:
https://idp-phf.etn.hu/saml2/idp/metadata.php
Metadati
Metadati SAML 2.0 in formato XML:
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp-phf.etn.hu/saml2/idp/metadata.php">
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-phf.etn.hu/saml2/idp/SingleLogoutService.php"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-phf.etn.hu/saml2/idp/SSOService.php"/>
</md:IDPSSODescriptor>
<md:ContactPerson contactType="technical">
<md:GivenName>Administrator</md:GivenName>
<md:EmailAddress>etn@kodasoft.hu</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
In formato flat per SimpleSAMLphp - da utilizzare se dall'altra parte c'è un'entità che utilizza SimpleSAMLphp
$metadata['https://idp-phf.etn.hu/saml2/idp/metadata.php'] = array (
'metadata-set' => 'saml20-idp-remote',
'entityid' => 'https://idp-phf.etn.hu/saml2/idp/metadata.php',
'SingleSignOnService' =>
array (
0 =>
array (
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://idp-phf.etn.hu/saml2/idp/SSOService.php',
),
),
'SingleLogoutService' =>
array (
0 =>
array (
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://idp-phf.etn.hu/saml2/idp/SingleLogoutService.php',
),
),
'certData' => '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',
'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
'contacts' =>
array (
0 =>
array (
'emailAddress' => 'etn@kodasoft.hu',
'contactType' => 'technical',
'givenName' => 'Administrator',
),
),
);
Certificati
Scarica i certificati X509 come file PEM-encoded