SAML 2.0 SP metaandmed

Need on simpleSAMLphp poolt sulle genereeritud metaandmed. Võid saata need metaandmed usaldatavatele partneritele usaldatava föderatsiooni loomiseks.

Metaandmete XML-i on võimalik saada spetsiaalselt aadressilt:

Metaandmed

SAML 2.0 metaandmete XML-vormingus:

<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://taeva.taat.edu.ee/module.php/saml/sp/metadata.php/taat">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIEATCCAumgAwIBAgIJAOomgRxnc2AIMA0GCSqGSIb3DQEBCwUAMIGWMQswCQYDVQQGEwJFRTERMA8GA1UECAwIVGFydHVtYWExDjAMBgNVBAcMBVRhcnR1MQ4wDAYDVQQKDAVFRU5ldDEZMBcGA1UECwwQVGVlbnVzdGUgb3Nha29uZDEaMBgGA1UEAwwRdGFldmEudGFhdC5lZHUuZWUxHTAbBgkqhkiG9w0BCQEWDmVlbmV0QGVlbmV0LmVlMB4XDTE2MDIxNjEyMjUyNVoXDTE5MDIxNTEyMjUyNVowgZYxCzAJBgNVBAYTAkVFMREwDwYDVQQIDAhUYXJ0dW1hYTEOMAwGA1UEBwwFVGFydHUxDjAMBgNVBAoMBUVFTmV0MRkwFwYDVQQLDBBUZWVudXN0ZSBvc2Frb25kMRowGAYDVQQDDBF0YWV2YS50YWF0LmVkdS5lZTEdMBsGCSqGSIb3DQEJARYOZWVuZXRAZWVuZXQuZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6VbOiTLVO7KVnqqPZFlbJedw17IN04OOu5ql4Y1LrM8fh0cM3e/azRmvr/UkB658reEWgmgmlWMDZe/bIBf7SwsmnExK/hmZJaX60zbRsqmTchbz/W5rxEtdLFDvOh+0tZIw2F09eQ7FrO0uKqm1p2OYzwX4S2Yq0EgbPKtj009rK5RHRxNSqt0ycSVFSzgIYKM84sG4OaRTJ8R3k+j3tGZ2TPeBC1M/TjWjAbpGeqowea/8lvSeg0OkWdrGuXqGMcbBsODM/NLflxstuCdgjsKnjnVijFrVyJJrap7bD1mALVS16pm2qkYarwVwEn+ULyTgAxQaWgimX9/r9daFAgMBAAGjUDBOMB0GA1UdDgQWBBTgdkDsbBb6piWFDcF3UyzDO6VLuDAfBgNVHSMEGDAWgBTgdkDsbBb6piWFDcF3UyzDO6VLuDAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCj+v/CaalLc9d+YShG6nxiHM9n+gMU2g3pyCQB8iRRMoYLX89o6BQ1f+6GEtgADsaFrDAPxFNbeca1w9f592hGh1E32EnnpGnOj2G2N5kLqBBNDMfThi/bcW5uNcHWG+v35elboDFscMIqXfYd54JVkkL623qFVWnQlEqIgAPGi7qu8jNNIi4syH5ljDAS5NZ9sCSmYjACJ7dr85zRrSMC+hflsSw+UgU3bD4JQysGOJab3JKmP1mPtYYdkRfQ6wVg7U59ZKS/HlOnGngqPpcnOXqtrxH1pKdaMmnP0B9cH5dlP7zLKcGjSwj1xl+DVYYJ+v5L/UrOFuvvTmR5HniK</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://taeva.taat.edu.ee/module.php/saml/sp/saml2-logout.php/taat"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://taeva.taat.edu.ee/module.php/saml/sp/saml2-acs.php/taat" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://taeva.taat.edu.ee/module.php/saml/sp/saml1-acs.php/taat" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://taeva.taat.edu.ee/module.php/saml/sp/saml2-acs.php/taat" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://taeva.taat.edu.ee/module.php/saml/sp/saml1-acs.php/taat/artifact" index="3"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser" Location="https://taeva.taat.edu.ee/module.php/saml/sp/saml2-acs.php/taat" index="4"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>eenet@eenet.ee</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

simpleSAMLphp formaadis: kasuta seda siis, kui ka teine pool kasutab simpleSAMLphp-d:

$metadata['https://taeva.taat.edu.ee/module.php/saml/sp/metadata.php/taat'] = array (
  'AssertionConsumerService' => 'https://taeva.taat.edu.ee/module.php/saml/sp/saml2-acs.php/taat',
  'SingleLogoutService' => 'https://taeva.taat.edu.ee/module.php/saml/sp/saml2-logout.php/taat',
  'certData' => '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',
);