SAML 2.0 IdP Metadatuak

Hona hemen SimpleSAMLphp-ak zuretzat sortu dituen metadatuak. Metadatuen dokumentu hau konfidantzazko zure kideei bidal diezaiekezu federazio bat konfiguratzeko.

xml metadatuekin URL bat eskura dezakezu:

https://test-club.digitarga.work/simplesaml/saml2/idp/metadata.php

Metadatuak

SAML 2.0 metadatuetako xml formatuan:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://test-club.digitarga.work/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://test-club.digitarga.work/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://test-club.digitarga.work/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Info</md:GivenName>
    <md:EmailAddress>mailto:info@muzzylearning.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formatuko fitxategi batean - beste muturrean SimpleSAMLphp entitate bat erabiltzen ariz gero, erabil ezazu aukera hau:

$metadata['https://test-club.digitarga.work/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://test-club.digitarga.work/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://test-club.digitarga.work/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://test-club.digitarga.work/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'info@muzzylearning.com',
            'contactType' => 'technical',
            'givenName' => 'Info',
        ],
    ],
];

Ziurtagiriak

X509 ziurtagiriak PEM formatuan deskargatu.

idp.crt