SAML 2.0 SP Metadata

Hona hemen SimpleSAMLphp-ak zuretzat sortu dituen metadatuak. Metadatuen dokumentu hau konfidantzazko zure kideei bidal diezaiekezu federazio bat konfiguratzeko.

xml metadatuekin URL bat eskura dezakezu:

https://demosp.sanet.sk/simplesaml/module.php/saml/sp/metadata.php/test-safeid

Metadatuak

SAML 2.0 metadatuetako xml formatuan:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://demosp.sanet.sk/sp">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol" AuthnRequestsSigned="true">
    <md:Extensions>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">SANET Demo Service</mdui:DisplayName>
        <mdui:DisplayName xml:lang="sk">SANET demo slu&#x17E;ba</mdui:DisplayName>
        <mdui:Description xml:lang="en">A demo Service Provider for the SAML2 based Identity Federation</mdui:Description>
        <mdui:Description xml:lang="sk">Demo slu&#x17E;ba pre SAML2 feder&#xE1;ciu ident&#xED;t</mdui:Description>
        <mdui:InformationURL xml:lang="sk">https://demosp.sanet.sk/simplesaml/module.php/core/authenticate.php?language=cs</mdui:InformationURL>
        <mdui:InformationURL xml:lang="en">https://demosp.sanet.sk/simplesaml/module.php/core/authenticate.php?language=en</mdui:InformationURL>
        <mdui:Logo width="224" height="166">https://demosp.sanet.sk/simplesaml/resources/logo/sanetlogo_sk.gif</mdui:Logo>
        <mdui:Logo width="224" height="166" xml:lang="en">https://demosp.sanet.sk/simplesaml/resources/logo/sanetlogo.gif</mdui:Logo>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDzzCCAregAwIBAgIJAOK2dcApb2tGMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlNLMRMwEQYDVQQIDApCcmF0aXNsYXZhMRMwEQYDVQQHDApCcmF0aXNsYXZhMQ4wDAYDVQQKDAVTQU5FVDEYMBYGA1UEAwwPZGVtb3NwLnNhbmV0LnNrMRswGQYJKoZIhvcNAQkBFgxub2NAdWFrb20uc2swHhcNMTYwNDA5MDkwNDUyWhcNMjYwNDA5MDkwNDUyWjB+MQswCQYDVQQGEwJTSzETMBEGA1UECAwKQnJhdGlzbGF2YTETMBEGA1UEBwwKQnJhdGlzbGF2YTEOMAwGA1UECgwFU0FORVQxGDAWBgNVBAMMD2RlbW9zcC5zYW5ldC5zazEbMBkGCSqGSIb3DQEJARYMbm9jQHVha29tLnNrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSqqmD2UO+Nw7wzMZvK3EQUL1cAPRPvgttg+jE5dzVT3BbE6tTsyBrYc+u4BS2dJJBmJvlyGr5xmK5kf7k3TcfIWz+Vf/uw9q8w3YouweQrbJ/95nxOZZScRCA3K9KJuynisA8hEHihc7zBTD9HR7QuqoejEbSMnVm+m/HoM1Se37Yp2EPE0YZiWfFduqe+Vd9yrVFm5VlFjbq2bOO9nOGL3T82lvoNl7OOJhb1amvynpg1bzDN68XHyTKJKNaywdo/ww9xTb7DYyEW6pSin0IHW7O0C/PpPpVS0ZcJ4LJu7TuaaupYW1x078tbGfM9xt8dEfSH78I0ZsdFeo15QKwIDAQABo1AwTjAdBgNVHQ4EFgQUVcxDwS4DllsblJbXZiB+t+3WKfUwHwYDVR0jBBgwFoAUVcxDwS4DllsblJbXZiB+t+3WKfUwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAMWLnH57Y2mE8B36EM1VTAwJku0S27Ic1IiWApaOigpr9Vnnw5RXLzyjFBZ5wQutU3VDdSF0eTChedFOY9ZAv822O4mGnFnAjyQGpwGuR5orbeKq/FZBqm+O+elh8I3dktPnCsqJJQEBrStLrfKfynhXuL0OUmgChw2VdNa+pIyppTAmAL9c07yk2DfGg8D5rqNwNoxSLinOgZLUfOUnT7ecxnelspmItZeLbIZ4W3JzsNr3/3ux1GTWQ3DAxGRFkc6k9GDJEr55lmMnWMnG8wmqrC3Tp7qFpbqDjXfOxz9x1wUaHt02HfUKJVudcJCS6sbrE+pE+zKr2vTG+UESk0A==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-logout.php/test-safeid"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-acs.php/test-safeid" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml1-acs.php/test-safeid" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-acs.php/test-safeid" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml1-acs.php/test-safeid/artifact" index="3"/>
    <md:AttributeConsumingService index="0">
      <md:ServiceName xml:lang="en">SANET Demo Service</md:ServiceName>
      <md:ServiceName xml:lang="sk">SANET demo slu&#x17E;ba</md:ServiceName>
      <md:ServiceDescription xml:lang="en">A demo Service Provider for the SAML2 based Identity Federation</md:ServiceDescription>
      <md:ServiceDescription xml:lang="sk">Demo slu&#x17E;ba pre SAML2 feder&#xE1;ciu ident&#xED;t</md:ServiceDescription>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonAffiliation"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonScopedAffiliation"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonPrincipalName"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonTargetedID"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonEntitlement"/>
      <md:RequestedAttribute Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="displayName"/>
      <md:RequestedAttribute Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="givenName"/>
      <md:RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="sn"/>
      <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="mail"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="schacHomeOrganization"/>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.25178.1.2.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="schacHomeOrganizationType"/>
    </md:AttributeConsumingService>
  </md:SPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">SANET</md:OrganizationName>
    <md:OrganizationName xml:lang="sk">SANET</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">SANET</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="sk">SANET</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">http://www.sanet.sk/</md:OrganizationURL>
    <md:OrganizationURL xml:lang="sk">http://www.sanet.sk/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="technical">
    <md:GivenName>UAKOM</md:GivenName>
    <md:SurName>NOC</md:SurName>
    <md:EmailAddress>mailto:noc@uakom.sk</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formatuko fitxategi batean - beste muturrean SimpleSAMLphp entitate bat erabiltzen ariz gero, erabil ezazu aukera hau:

$metadata['https://demosp.sanet.sk/sp'] = array (
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-logout.php/test-safeid',
    ),
  ),
  'AssertionConsumerService' => 
  array (
    0 => 
    array (
      'index' => 0,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-acs.php/test-safeid',
    ),
    1 => 
    array (
      'index' => 1,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml1-acs.php/test-safeid',
    ),
    2 => 
    array (
      'index' => 2,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml2-acs.php/test-safeid',
    ),
    3 => 
    array (
      'index' => 3,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
      'Location' => 'https://demosp.sanet.sk/simplesaml/module.php/saml/sp/saml1-acs.php/test-safeid/artifact',
    ),
  ),
  'name' => 
  array (
    'en' => 'SANET Demo Service',
    'sk' => 'SANET demo služba',
  ),
  'attributes' => 
  array (
    0 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.1',
    1 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.9',
    2 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.6',
    3 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.10',
    4 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.7',
    5 => 'urn:oid:2.16.840.1.113730.3.1.241',
    6 => 'urn:oid:2.5.4.42',
    7 => 'urn:oid:2.5.4.4',
    8 => 'urn:oid:0.9.2342.19200300.100.1.3',
    9 => 'urn:oid:1.3.6.1.4.1.25178.1.2.9',
    10 => 'urn:oid:1.3.6.1.4.1.25178.1.2.10',
  ),
  'description' => 
  array (
    'en' => 'A demo Service Provider for the SAML2 based Identity Federation',
    'sk' => 'Demo služba pre SAML2 federáciu identít',
  ),
  'attributes.NameFormat' => 'urn:oasis:names:tc:SAML:2.0:attrname-format:uri',
  'OrganizationName' => 
  array (
    'en' => 'SANET',
    'sk' => 'SANET',
  ),
  'OrganizationDisplayName' => 
  array (
    'en' => 'SANET',
    'sk' => 'SANET',
  ),
  'OrganizationURL' => 
  array (
    'en' => 'http://www.sanet.sk/',
    'sk' => 'http://www.sanet.sk/',
  ),
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'mailto:noc@uakom.sk',
      'contactType' => 'technical',
      'givenName' => 'UAKOM',
      'surName' => 'NOC',
    ),
  ),
  'certData' => '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',
  'redirect.validate' => true,
);