SAML 2.0 IdP metaandmed

Need on SimpleSAMLphp poolt sulle genereeritud metaandmed. Võid saata need metaandmed usaldatavatele partneritele usaldatava föderatsiooni loomiseks.

Metaandmete XML-i on võimalik saada spetsiaalselt aadressilt:

https://sso.vainfarm.com/saml2/idp/metadata.php

Metaandmed

SAML 2.0 metaandmete XML-vormingus:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sso.vainfarm.com/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.vainfarm.com/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.vainfarm.com/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>

SimpleSAMLphp formaadis: kasuta seda siis, kui ka teine pool kasutab SimpleSAMLphp-d:

$metadata['https://sso.vainfarm.com/saml2/idp/metadata.php'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://sso.vainfarm.com/saml2/idp/metadata.php',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://sso.vainfarm.com/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://sso.vainfarm.com/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => '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',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
);

Sertifikaadid

Lae alla X509 sertifikaadid PEM kodeeringus failidena.

idp.crt

SES_GLOBAL_ID::
Warning: session_name(): Cannot change session name when headers already sent in /home/vainfarm/www/sso/lib/SimpleSAML/SessionHandlerPHP.php on line 107

Warning: session_set_cookie_params(): Cannot change session cookie parameters when headers already sent in /home/vainfarm/www/sso/lib/SimpleSAML/SessionHandlerPHP.php on line 119
getPreviousName::NULL getPreviousValue::array(2) { ["Name"]=> string(9) "PHPSESSID" ["Previous"]=> string(11) "No Previous" } NULL