SAML 2.0 IdP metadata

Her er metadata som SimpleSAMLphp har generert for deg. Du må utveksle metadata med de partene du stoler på for å sette opp en føderasjon.

Du kan nå metadata i XML-format på en dedikert URL:

https://idp.kre.hu/simplesaml/saml2/idp/metadata.php

Metadata

I SAML 2.0 Metadata XML Format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.kre.hu/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.kre.hu/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.kre.hu/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>

I SimpleSAMLphp format - bruk denne dersom du benytter SimpleSAMLphp i den andre enden:

$metadata['https://idp.kre.hu/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://idp.kre.hu/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://idp.kre.hu/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://idp.kre.hu/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
];

Sertifikater

Last ned X509-sertifikatene som PEM-filer.

idp.crt