Metadados SAML 2.0 SP

De seguida pode encontrar os metadados gerados pelo SimpleSAMLphp. Pode enviar este documento de metadados aos seus parceiros para configurar uma federação.

Pode obter os metadados em XML num URL dedicado:

https://demosp.sanet.sk/simplesaml/module.php/saml/sp/metadata.php/safeid

Metadados

Metadados no formato XML SAML 2.0

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://demosp.sanet.sk/sp">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol" AuthnRequestsSigned="true">
    <md:Extensions>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">SANET Demo Service</mdui:DisplayName>
        <mdui:DisplayName xml:lang="sk">SANET demo slu&#x17E;ba</mdui:DisplayName>
        <mdui:Description xml:lang="en">A demo Service Provider for the SAML2 based Identity Federation</mdui:Description>
        <mdui:Description xml:lang="sk">Demo slu&#x17E;ba pre SAML2 feder&#xE1;ciu ident&#xED;t</mdui:Description>
        <mdui:InformationURL xml:lang="sk">https://demosp.sanet.sk/simplesaml/module.php/core/authenticate.php?language=cs</mdui:InformationURL>
        <mdui:InformationURL xml:lang="en">https://demosp.sanet.sk/simplesaml/module.php/core/authenticate.php?language=en</mdui:InformationURL>
        <mdui:Logo width="224" height="166">https://demosp.sanet.sk/simplesaml/resources/logo/sanetlogo_sk.gif</mdui:Logo>
        <mdui:Logo width="224" height="166" xml:lang="en">https://demosp.sanet.sk/simplesaml/resources/logo/sanetlogo.gif</mdui:Logo>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-logout.php/safeid"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-acs.php/safeid" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml1-acs.php/safeid" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-acs.php/safeid" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml1-acs.php/safeid/artifact" index="3"/>
    <md:AttributeConsumingService index="0">
      <md:ServiceName xml:lang="en">SANET Demo Service</md:ServiceName>
      <md:ServiceName xml:lang="sk">SANET demo slu&#x17E;ba</md:ServiceName>
      <md:ServiceDescription xml:lang="en">A demo Service Provider for the SAML2 based Identity Federation</md:ServiceDescription>
      <md:ServiceDescription xml:lang="sk">Demo slu&#x17E;ba pre SAML2 feder&#xE1;ciu ident&#xED;t</md:ServiceDescription>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonAffiliation"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonScopedAffiliation"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonPrincipalName"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonTargetedID"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonEntitlement"/>
      <md:RequestedAttribute Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="displayName"/>
      <md:RequestedAttribute Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="givenName"/>
      <md:RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="sn"/>
      <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="mail"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="schacHomeOrganization"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.25178.1.2.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="schacHomeOrganizationType"/>
    </md:AttributeConsumingService>
  </md:SPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">SANET</md:OrganizationName>
    <md:OrganizationName xml:lang="sk">SANET</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">SANET</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="sk">SANET</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">http://www.sanet.sk/</md:OrganizationURL>
    <md:OrganizationURL xml:lang="sk">http://www.sanet.sk/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="technical">
    <md:GivenName>UAKOM</md:GivenName>
    <md:SurName>NOC</md:SurName>
    <md:EmailAddress>mailto:noc@uakom.sk</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Metadados no formato ficheiro de configuração do SimpleSAMLphp. Use esta alternativa se usar uma entidade SimpleSAMLphp no outro extremo:

$metadata['https://demosp.sanet.sk/sp'] = array (
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-logout.php/safeid',
    ),
  ),
  'AssertionConsumerService' => 
  array (
    0 => 
    array (
      'index' => 0,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-acs.php/safeid',
    ),
    1 => 
    array (
      'index' => 1,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml1-acs.php/safeid',
    ),
    2 => 
    array (
      'index' => 2,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-acs.php/safeid',
    ),
    3 => 
    array (
      'index' => 3,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml1-acs.php/safeid/artifact',
    ),
  ),
  'name' => 
  array (
    'en' => 'SANET Demo Service',
    'sk' => 'SANET demo služba',
  ),
  'attributes' => 
  array (
    0 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.1',
    1 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.9',
    2 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.6',
    3 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.10',
    4 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.7',
    5 => 'urn:oid:2.16.840.1.113730.3.1.241',
    6 => 'urn:oid:2.5.4.42',
    7 => 'urn:oid:2.5.4.4',
    8 => 'urn:oid:0.9.2342.19200300.100.1.3',
    9 => 'urn:oid:1.3.6.1.4.1.25178.1.2.9',
    10 => 'urn:oid:1.3.6.1.4.1.25178.1.2.10',
  ),
  'description' => 
  array (
    'en' => 'A demo Service Provider for the SAML2 based Identity Federation',
    'sk' => 'Demo služba pre SAML2 federáciu identít',
  ),
  'attributes.NameFormat' => 'urn:oasis:names:tc:SAML:2.0:attrname-format:uri',
  'OrganizationName' => 
  array (
    'en' => 'SANET',
    'sk' => 'SANET',
  ),
  'OrganizationDisplayName' => 
  array (
    'en' => 'SANET',
    'sk' => 'SANET',
  ),
  'OrganizationURL' => 
  array (
    'en' => 'http://www.sanet.sk/',
    'sk' => 'http://www.sanet.sk/',
  ),
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'mailto:noc@uakom.sk',
      'contactType' => 'technical',
      'givenName' => 'UAKOM',
      'surName' => 'NOC',
    ),
  ),
  'certData' => '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',
  'redirect.validate' => true,
);