SAML 2.0 IdP Metadata

Dit is de metadata die automatisch is gegenereerd door SimpleSAMLphp. U kunt deze metadata uitwisselen met uw federatiepartners.

U kunt deze directe URL gebruiken om de metadata XML op te vragen:

https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metadata

In SAML 2.0 Metadata XML formaat:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

In SimpleSAMLphp flat file formaat - gebruik dit wanneer uw federatiepartner ook SimpleSAMLphp gebruikt

$metadata['https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Certificaten

Download de X509-certificaten in PEM-formaat.

idp.crt