Shib 1.3 IdP metadata

Her er metadata som SimpleSAMLphp har generert for deg. Du må utveksle metadata med de partene du stoler på for å sette opp en føderasjon.

Du kan nå metadata i XML-format på en dedikert URL:

http://35.72.173.230/simplesaml/shib13/idp/metadata.php?output=xml

Metadata

I SAML 2.0 Metadata XML Format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://35.72.173.230/simplesaml/shib13/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="http://35.72.173.230/simplesaml/shib13/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:na@example.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I SimpleSAMLphp format - bruk denne dersom du benytter SimpleSAMLphp i den andre enden:

$metadata['http://35.72.173.230/simplesaml/shib13/idp/metadata.php'] = array (
  'metadata-set' => 'shib13-idp-remote',
  'entityid' => 'http://35.72.173.230/simplesaml/shib13/idp/metadata.php',
  'SingleSignOnService' => 'http://35.72.173.230/simplesaml/shib13/idp/SSOService.php',
  'certData' => 'MIIDRTCCAi2gAwIBAgIJAPNsH1Kf38SAMA0GCSqGSIb3DQEBCwUAMDkxCzAJBgNVBAYTAkpQMRAwDgYDVQQIDAdTQUlUQU1BMRgwFgYDVQQDDA9pZHAuZXhhbXBsZS5jb20wHhcNMjIxMTA0MDUwMDIyWhcNMzIxMTAzMDUwMDIyWjA5MQswCQYDVQQGEwJKUDEQMA4GA1UECAwHU0FJVEFNQTEYMBYGA1UEAwwPaWRwLmV4YW1wbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx13HhYfTAYIZiIa4uOX/jRn7C+h4snuBkXvu6sKg2Skxqr9smviQOPqTEPpg2g4hOcWdU0cYO3yUnZb+hjXv4nQKElhKJh0XL/njqiiohDMLbnyXnjP2B1Z49jh0X8pj8FVBuXdjLZ6VyjnaBrWbeIc2M8T25yAdWzSy+UaegX1P6QvwjfvgY7vBHBlG4eHV6CLJ2BW27C+aQi9HFd0ijvfLEAwB1gZigFX6XC5jIEnfMPv2y3OprW5ee9JUBRjc/750vrCqYx4LoRW3hgfA1Ay8ZkwlLf6Rp71b62M9wYfEnD7oQ3grEGbAbLJPLrHdy31Gpyfm5P1SjG8mg93gQIDAQABo1AwTjAdBgNVHQ4EFgQUmvHuC6ri0EL+GXLndjurp0x1RiAwHwYDVR0jBBgwFoAUmvHuC6ri0EL+GXLndjurp0x1RiAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAXRMX7JXHS297/I83yHj/Wuk4sZUngaI3CySnRNfAXcicT0xzsf84mlfusdf6ktSfOwZ1wpKcDZBF45sU1b7VLan5dlcr20yUIipiumb0/5ZPFFktnj2KW7i6MuBEKFFzD/ggwZ8LkddWqF42WjWXyD6AepbgUdpPUO/jMe+yG86tUtfAoNOoj6BlWbaxVll2eMBcZ6KbhOZ4VL8yhRo+EektRki1ihS1LwUzoP2nmtDzoFa77NKqKUw1xFrMXpm4UtkEj/KFMc1xjsYvtBAuGVPuF6zZ0570aa0yeD3NkyauT5Na68MVTksEx1UYp40KpDyxS9FG+LW7okeDAnUXuQ==',
  'NameIDFormat' => 'urn:mace:shibboleth:1.0:nameIdentifier',
);