Metadati SAML 2.0 IdP
Questi sono i metadati che SimpleSAMLphp ha generato e che possono essere inviati ai partner fidati per creare una federazione tra siti.
Si possono ottenere i metadati in XML dall'URL dedicata:
https://login.palaeolynx.mockup.mintware.net/simplesaml/saml2/idp/metadata.php
Metadati
Metadati SAML 2.0 in formato XML:
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://login.palaeolynx.mockup.mintware.net/simplesaml/saml2/idp/metadata.php">
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>MIIFHTCCA4WgAwIBAgIUftHV8lNqQynxhFa4rHuKEAWTWIYwDQYJKoZIhvcNAQELBQAwgZ0xCzAJBgNVBAYTAkNIMQswCQYDVQQIDAJaRzESMBAGA1UEBwwJSGFnZW5kb3JuMREwDwYDVQQKDAhNSU5Ud2FyZTEgMB4GA1UECwwXSW5mcmFzdHJ1Y3R1cmUgU2VydmljZXMxFDASBgNVBAMMC21pbnR3YXJlLmNoMSIwIAYJKoZIhvcNAQkBFhNzdXBwb3J0QG1pbnR3YXJlLmNoMB4XDTIwMDIxNjIwMjEwNloXDTMwMDIxNTIwMjEwNlowgZ0xCzAJBgNVBAYTAkNIMQswCQYDVQQIDAJaRzESMBAGA1UEBwwJSGFnZW5kb3JuMREwDwYDVQQKDAhNSU5Ud2FyZTEgMB4GA1UECwwXSW5mcmFzdHJ1Y3R1cmUgU2VydmljZXMxFDASBgNVBAMMC21pbnR3YXJlLmNoMSIwIAYJKoZIhvcNAQkBFhNzdXBwb3J0QG1pbnR3YXJlLmNoMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAzJLVmsZi6c++/7eGG9hvtNpLBybuLlqf9OlYPqcj6rSab/xvAy9DWSTlpWiwJg4XfJdau9XlbkTxbKdu0I2hibOOMEt+jn58TktXi1nbgA106S4pXTdZ3EomJ2p6lQWIH4BhydvR3Dk+nhrne2l2ZoZ9NDi9aizJibrOt7UOs8wB6mtdS5GnFEm0m+MDLhzCGaE7AOd4umXYSqynRxVz65+xFueLk2EfxO6go/qR3E7rNreGEFyKfIRhtM2RvznCnxuzflHusDHgqWVzbbM1+GrWemcA84KxtCeXv51AvvELbPLWkH6EAoAmM2lSml5JtVyyLUN+GE2/sl0+EoeN7mrnSLcG8FyOamdMjSZQBZW94dOUtSlYWP+IcpzhoMry0mcO1Cg63xzWOntLPxaN9OOrT5tUz2dsKSYd99Ra9Wf8JeJzbSkpKEGkEjTM1SLUICadlajja/zQ+JV0TF4/B9jhXOyj9JE8Vkxq/1zpLqDqSF2xpahNBewbQPdLKrTpAgMBAAGjUzBRMB0GA1UdDgQWBBSmVNE3yQAZZjxmHNotP0HCnaUiVDAfBgNVHSMEGDAWgBSmVNE3yQAZZjxmHNotP0HCnaUiVDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBgQAoICCuO+PJ6BSOomWtgcDoJYgvK51w+TK2ju2k8vEY7y3nXqd9gA0BabbEn+6484NA0MJaEWbg5Thmd0EseeVEeJALfIgTZDMY+Pb0UrL1unDa1KJOuedcct3OMSYkHjpislaTYJtUAQrIQrI4nBBVFf/DL2ytyxOZOdT3GRZTJOxd30K/qChde5T278i8g22Q3cLqvt9u6b5tzKa2q//5xelIY3W/VQPRJONQTxmMF9SGr/5bR/srPq4dtWBdonknhrDvqmOR4qtpbhEFDuXO7PtX2qBsrXd7sbEbdnxD1DBrODtPImbZHLao+VC+SdyvPqRPowTYgMl0MFVoPy6QPwRcRbYWjSNDHaN2EIPbg1v41yV23lIb1dY6dqqW+zecfoR9hQvyEAlzpzRtmexVCGw4vsOYDH2ijVhCMRmzjW1gP5yzqcuTI32wuzdHT9fEz8SE55ZA57gPDg+v8lrxf7f37c4yUKgHPh6G3/a3DB9lWM2ZKzt169KaJUq7zPc=</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.palaeolynx.mockup.mintware.net/simplesaml/saml2/idp/SingleLogoutService.php"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.palaeolynx.mockup.mintware.net/simplesaml/saml2/idp/SSOService.php"/>
</md:IDPSSODescriptor>
<md:ContactPerson contactType="technical">
<md:GivenName>MINTware</md:GivenName>
<md:SurName>Kundendienst</md:SurName>
<md:EmailAddress>mailto:support@mintware.ch</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
In formato flat per SimpleSAMLphp - da utilizzare se dall'altra parte c'è un'entità che utilizza SimpleSAMLphp
$metadata['https://login.palaeolynx.mockup.mintware.net/simplesaml/saml2/idp/metadata.php'] = [
'metadata-set' => 'saml20-idp-remote',
'entityid' => 'https://login.palaeolynx.mockup.mintware.net/simplesaml/saml2/idp/metadata.php',
'SingleSignOnService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://login.palaeolynx.mockup.mintware.net/simplesaml/saml2/idp/SSOService.php',
],
],
'SingleLogoutService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://login.palaeolynx.mockup.mintware.net/simplesaml/saml2/idp/SingleLogoutService.php',
],
],
'certData' => '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',
'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
'contacts' => [
[
'emailAddress' => 'support@mintware.ch',
'contactType' => 'technical',
'givenName' => 'MINTware',
'surName' => 'Kundendienst',
],
],
];
Certificati
Scarica i certificati X509 come file PEM-encoded