SAML 2.0 IdP metadata

Her er metadata som SimpleSAMLphp har generert for deg. Du må utveksle metadata med de partene du stoler på for å sette opp en føderasjon.

Du kan nå metadata i XML-format på en dedikert URL:

https://idp.kubg.edu.ua/simplesaml/saml2/idp/metadata.php

Metadata

I SAML 2.0 Metadata XML Format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.kubg.edu.ua/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIE3zCCA0egAwIBAgIUWk7Gcb6lXaZSxNbLZbJn4SubM88wDQYJKoZIhvcNAQELBQAwfzELMAkGA1UEBhMCVUExDTALBgNVBAgMBEt5aXYxKTAnBgNVBAoMIEJvcnlzIEdyaW5jaGVua28gS3lpdiBVbml2ZXJzaXR5MRQwEgYDVQQDDAtrdWJnLmVkdS51YTEgMB4GCSqGSIb3DQEJARYRYWRtaW5Aa3ViZy5lZHUudWEwHhcNMjAxMTEwMjAxNzMxWhcNMzAxMTEwMjAxNzMxWjB/MQswCQYDVQQGEwJVQTENMAsGA1UECAwES3lpdjEpMCcGA1UECgwgQm9yeXMgR3JpbmNoZW5rbyBLeWl2IFVuaXZlcnNpdHkxFDASBgNVBAMMC2t1YmcuZWR1LnVhMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBrdWJnLmVkdS51YTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBALKB0fGiOmjtmVvi1M2nMz9zr2rnGZC/FDzIozI/NyEqVaHWuCyJysUF1z/B9Kbr/lw15fHm2YMRlb2KSunY3RIRtdKl2mejFLe5SVnGz9PfZn0ozY1aqWNTpbaYmRx/A0O6eGUsAdFPRseJB+Zj1XbWgYVfYgybPv377/b0EHvQj4vU9r7aqGhEw9wxx4T6Dtozxn/vwlXSLnMZ+cHLeE6Ev4PqBCpDCyFszA+2R8YsVf4F2aqar1riIIwRamGVg56nmTyG3g9jH+0S4wu+5Mr9IfZhrLbjfrd5iXHDX9GCwp1upJ7g1mFm+V3Emrdq6xEUou7dowrfhRrWglvYgCoGG0WW3NEps5dkAi9cSLG3aPdtAI/s9JaWOaiRRZHVnaGUkH2I1E0p5YVbsk+ztUOJEbf/uf6WFzRPJWH+flJXTfjqJt9A5aF+ijJhSu6XPZZFefvNkF2iC8HJC4Rmg/l98N4JPxmTr9D9+ahRmPa2ugyWQbO1qHbZov4ukA3MhwIDAQABo1MwUTAdBgNVHQ4EFgQUu4bKfNdrz6UHmEA1k3twO04Mn88wHwYDVR0jBBgwFoAUu4bKfNdrz6UHmEA1k3twO04Mn88wDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAYEAbXMY7/M+ZPfHusvLHW9IFPc64I63dumr7epxeA2CcyNoD2xj+FzreWvp8lTi6kojxUazfw4k/XGB6OWA4Kyj+Bi7irNOWv2g9trMbVVntK7o/UGSoKEcJ2E6wvgPE2eIZ/9fWoOAIsYpRqQ5GkONCeaD21MfKKDFsBm0mZoq+GkbG1cUT5sYHYZY1zNWeeb0vBJzk963eOMuKceI8Pp5Nj2jdiNs7OHFZRW0ISA6Ol2pTh9/lmHgl9VOKEJwQ+dHkoXiuo2tYvJyw0AX/G33Z7DEztQU/5/cXV9+UsBOGMkkT/xXod1XPG/NgEimDCprsewP6/gQ3BZkkRZ1xf4Jw89cj0z7xL3I8n+K75uilsdFJed6rEJ2uzhChp63KuvAm1qh1KKE3YQu5M5SgPIcaz5SDgmmPJC4omUiloofxoWuUSqIAq/OoSiVzOuz6Jif6JCG3AezC06whYFidHtVvCz2db9C2imZb42ADrF/hmSwPkboUCGHpCEfttz1rJQp</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.kubg.edu.ua/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.kubg.edu.ua/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:na@kubg.edu.ua</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I SimpleSAMLphp format - bruk denne dersom du benytter SimpleSAMLphp i den andre enden:

$metadata['https://idp.kubg.edu.ua/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://idp.kubg.edu.ua/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://idp.kubg.edu.ua/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://idp.kubg.edu.ua/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'na@kubg.edu.ua',
            'contactType' => 'technical',
            'givenName' => 'Administrator',
        ],
    ],
];

Sertifikater

Last ned X509-sertifikatene som PEM-filer.

idp.crt