SAML 2.0 SP Metadata

Hona hemen SimpleSAMLphp-ak zuretzat sortu dituen metadatuak. Metadatuen dokumentu hau konfidantzazko zure kideei bidal diezaiekezu federazio bat konfiguratzeko.

xml metadatuekin URL bat eskura dezakezu:

https://sp.webdevstock.com/module.php/saml/sp/metadata.php/abg-sp

Metadatuak

SAML 2.0 metadatuetako xml formatuan:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sp.webdevstock.com/module.php/saml/sp/metadata.php/abg-sp">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol" AuthnRequestsSigned="true">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.webdevstock.com/module.php/saml/sp/saml2-logout.php/abg-sp"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.webdevstock.com/module.php/saml/sp/saml2-acs.php/abg-sp" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sp.webdevstock.com/module.php/saml/sp/saml1-acs.php/abg-sp" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.webdevstock.com/module.php/saml/sp/saml2-acs.php/abg-sp" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sp.webdevstock.com/module.php/saml/sp/saml1-acs.php/abg-sp/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>SP</md:GivenName>
    <md:SurName>Administrator</md:SurName>
    <md:EmailAddress>mailto:sp@alliedbeverage.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formatuko fitxategi batean - beste muturrean SimpleSAMLphp entitate bat erabiltzen ariz gero, erabil ezazu aukera hau:

$metadata['https://sp.webdevstock.com/module.php/saml/sp/metadata.php/abg-sp'] = [
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://sp.webdevstock.com/module.php/saml/sp/saml2-logout.php/abg-sp',
        ],
    ],
    'AssertionConsumerService' => [
        [
            'index' => 0,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
            'Location' => 'https://sp.webdevstock.com/module.php/saml/sp/saml2-acs.php/abg-sp',
        ],
        [
            'index' => 1,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
            'Location' => 'https://sp.webdevstock.com/module.php/saml/sp/saml1-acs.php/abg-sp',
        ],
        [
            'index' => 2,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
            'Location' => 'https://sp.webdevstock.com/module.php/saml/sp/saml2-acs.php/abg-sp',
        ],
        [
            'index' => 3,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
            'Location' => 'https://sp.webdevstock.com/module.php/saml/sp/saml1-acs.php/abg-sp/artifact',
        ],
    ],
    'contacts' => [
        [
            'emailAddress' => 'sp@alliedbeverage.com',
            'contactType' => 'technical',
            'givenName' => 'SP',
            'surName' => 'Administrator',
        ],
    ],
    'certData' => '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',
    'redirect.validate' => true,
];