SAML 2.0 IdP Metadata

Her er metadata generert av SimpleSAMLphp for deg. Du kan senda dette metadata-dokumentet til dine partnarar, slik at de kan setja opp ein tillitsføderasjon.

Du kan få metadata i XML på ein URL:

https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metadata

På SAML 2.0 metadata XML-format

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDaTCCAlGgAwIBAgIQNjVvfeONDfP7Wjc57OAwBjANBgkqhkiG9w0BAQsFADAkMSIwIAYDVQQDDBlBSS1Ub29sIFRlc3QgSW50ZXJtZWRpYXRlMB4XDTI2MDMyMDE1MjEzMFoXDTI2MDcxODE1MjEzMFowFzEVMBMGA1UEAwwMYWktdG9vbC1zYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr0rEOseIuitpLa01jhlYdu6fXpWxFOt+iCPCGgvpQjQWUOS9iKbyfCTAOwDGdMjxPEaDpHmEtpps7JEVPHAMlnRwBgVvFWIaz+oHj64sqajBoEFlMpByBCdbM3r9AfISVFAFqbcjhDI41SbUCNNW8C1GZLeSYUHOs3Jk4hOBXtrM8K7zyTGXpZ3S2yvdvFRwUXr4lxXMOSN9BvVMPkhzZzf5kU+Vc3eG156h1kj7JPNy4ShXDRQvaKaxRnyXiCCN/Dl/djHw6mOquuYdYtCcoU60gjf51MyEJelUDTRhHQuL7Y1B+AUq8HGUc6rCpX00tv723LDUUxpFsDSIOV3dQIDAQABo4GjMIGgMAkGA1UdEwQCMAAwHQYDVR0OBBYEFMbEfkaCkVg5Fz5pvCPFRTcLXUY+MFIGA1UdIwRLMEmAFGVLH+Yja4CYddjNWlob6Yb3yfT+oR6kHDAaMRgwFgYDVQQDDA9BSS1Ub29sIFRlc3QgQ0GCEQCYo3+a/WrHhRnjoXq8C2ftMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAQEAQ+yZHL7neysnEMc3axzCTYJ29c5bm234gqltrQ5cpi3X4gBhGqtbGicJ3jopFzS8wvqySbyhwD4OlxdjOob6WjcZrlnf1i7WlV0tqH27DJEFhrUKyLAk4zW18arhT4SnNdqDymEP5JsaKm4Vjg0dyBFmNBwU29CSeWwHPx+2Aj2rmB7Z02gFXoLD8N1fLlJUWcV9vs5HmSdAPHYd7uu9oGcNfuv8mtJ5oTUW7X2Gc4/X4+5OroccpOCHkPE2BYg60VSiTCjBh1Itpz0Uxl363EdUvo5Lh8VtXWcpllKu7oHRj6mHMO6wLDfxhDyY+HMCWRxVlSwAPnRU0Uk1q+9YOg==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDaTCCAlGgAwIBAgIQNjVvfeONDfP7Wjc57OAwBjANBgkqhkiG9w0BAQsFADAkMSIwIAYDVQQDDBlBSS1Ub29sIFRlc3QgSW50ZXJtZWRpYXRlMB4XDTI2MDMyMDE1MjEzMFoXDTI2MDcxODE1MjEzMFowFzEVMBMGA1UEAwwMYWktdG9vbC1zYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr0rEOseIuitpLa01jhlYdu6fXpWxFOt+iCPCGgvpQjQWUOS9iKbyfCTAOwDGdMjxPEaDpHmEtpps7JEVPHAMlnRwBgVvFWIaz+oHj64sqajBoEFlMpByBCdbM3r9AfISVFAFqbcjhDI41SbUCNNW8C1GZLeSYUHOs3Jk4hOBXtrM8K7zyTGXpZ3S2yvdvFRwUXr4lxXMOSN9BvVMPkhzZzf5kU+Vc3eG156h1kj7JPNy4ShXDRQvaKaxRnyXiCCN/Dl/djHw6mOquuYdYtCcoU60gjf51MyEJelUDTRhHQuL7Y1B+AUq8HGUc6rCpX00tv723LDUUxpFsDSIOV3dQIDAQABo4GjMIGgMAkGA1UdEwQCMAAwHQYDVR0OBBYEFMbEfkaCkVg5Fz5pvCPFRTcLXUY+MFIGA1UdIwRLMEmAFGVLH+Yja4CYddjNWlob6Yb3yfT+oR6kHDAaMRgwFgYDVQQDDA9BSS1Ub29sIFRlc3QgQ0GCEQCYo3+a/WrHhRnjoXq8C2ftMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAQEAQ+yZHL7neysnEMc3axzCTYJ29c5bm234gqltrQ5cpi3X4gBhGqtbGicJ3jopFzS8wvqySbyhwD4OlxdjOob6WjcZrlnf1i7WlV0tqH27DJEFhrUKyLAk4zW18arhT4SnNdqDymEP5JsaKm4Vjg0dyBFmNBwU29CSeWwHPx+2Aj2rmB7Z02gFXoLD8N1fLlJUWcV9vs5HmSdAPHYd7uu9oGcNfuv8mtJ5oTUW7X2Gc4/X4+5OroccpOCHkPE2BYg60VSiTCjBh1Itpz0Uxl363EdUvo5Lh8VtXWcpllKu7oHRj6mHMO6wLDfxhDyY+HMCWRxVlSwAPnRU0Uk1q+9YOg==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

På flat fil for SimpleSAMLphp. Bruk denne dersom du bruker SimpleSAMLphp på andre sida:

$metadata['https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://ai-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Sertifikat

Last ned X509-sertifikat som PEM-koda filer

idp.crt