SAML 2.0 IdP metaandmed

Need on SimpleSAMLphp poolt sulle genereeritud metaandmed. Võid saata need metaandmed usaldatavatele partneritele usaldatava föderatsiooni loomiseks.

Metaandmete XML-i on võimalik saada spetsiaalselt aadressilt:

https://fdtme.idp-proxy.finki.ukim.mk/saml2/idp/metadata.php

Metaandmed

SAML 2.0 metaandmete XML-vormingus:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://fdtme.idp-proxy.finki.ukim.mk/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fdtme.idp-proxy.finki.ukim.mk/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fdtme.idp-proxy.finki.ukim.mk/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>FINKI</md:GivenName>
    <md:SurName>FCC</md:SurName>
    <md:EmailAddress>fcc@finki.ukim.mk</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formaadis: kasuta seda siis, kui ka teine pool kasutab SimpleSAMLphp-d:

$metadata['https://fdtme.idp-proxy.finki.ukim.mk/saml2/idp/metadata.php'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://fdtme.idp-proxy.finki.ukim.mk/saml2/idp/metadata.php',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://fdtme.idp-proxy.finki.ukim.mk/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://fdtme.idp-proxy.finki.ukim.mk/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => 'MIIDtTCCAp2gAwIBAgIUAhN/oJuKs1ty6dhe0NIAiw37FPUwDQYJKoZIhvcNAQELBQAwajELMAkGA1UEBhMCTUsxEzARBgNVBAgMClNvbWUtU3RhdGUxDzANBgNVBAcMBlNrb3BqZTENMAsGA1UECgwEVUtJTTEmMCQGA1UEAwwdZmR0bWUuaWRwLXByb3h5LmZpbmtpLnVraW0ubWswHhcNMjAwNDA1MTcyMDEzWhcNMzAwNDAzMTcyMDEzWjBqMQswCQYDVQQGEwJNSzETMBEGA1UECAwKU29tZS1TdGF0ZTEPMA0GA1UEBwwGU2tvcGplMQ0wCwYDVQQKDARVS0lNMSYwJAYDVQQDDB1mZHRtZS5pZHAtcHJveHkuZmlua2kudWtpbS5tazCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALx7rHEw68rCrmwxYVjY5cU9x/Zm2K0WkYYVyz4sCQThTjccwFCPqAL7urAhNSVXAhEPriy01y7Y2lldbL9Q1g7z8++mNR+QO2JZKcelClKZTRY7cCUGbSO7tJP84EO2bIEM1AhW6uwMWEIUVmh1nTNcm/4Q5bWGuFvIbh3MNUdF+57uHX08CpX+n+0G9XSD+VcbO47vUEJw/t5i6+RBwbhzzXCUUlXGXumPJHhbE/uFWm91qKB15eYKnawvhxKLAJqQSdiGTyxOJk/0E1gZHhqz4abemlLaK2MIcfCkwveb14UMxYKdW9nTamMJApyMyAGcvUUfye2PyJyufp3ag4kCAwEAAaNTMFEwHQYDVR0OBBYEFDL12h/0nVvuRGZoJJKnQuVqPTHbMB8GA1UdIwQYMBaAFDL12h/0nVvuRGZoJJKnQuVqPTHbMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAKQO4Za/IeD760IJg+bB7lwgRuiZqV16jcfOrkQelXsABucCf1Zc8RdWTRLpKE93is0CN+X0aiUWBtqxaNtR1vfgZIwrZhBy45QsOUroPr7ce5276WCQVQ7VClFnGUbhGud1nKXERpeIgvuWm8md6VDQ0O9IJB14AVnNiVCwwcC7+mTB1xv5kZtOabTbgzu0nrwwkQ6JAVmC7qH9IVGkHIzNTegbW1+cnbmCKEVzFDM3Ssv+GpCQ2VGVp8XxIFLcsMSHLDYAgWRyTxF4RawZDgwXlPHcBUHt8XCCbmLV0Cv3nR0xHq+D7KYgqGrVKbIyOAOtps1nyaMk+qllzWaRToc=',
  'NameIDFormat' => 
  array (
    0 => 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',
  ),
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'fcc@finki.ukim.mk',
      'contactType' => 'technical',
      'givenName' => 'FINKI',
      'surName' => 'FCC',
    ),
  ),
);

Sertifikaadid

Lae alla X509 sertifikaadid PEM kodeeringus failidena.

idp.crt