SAML 2.0 IdP Metadata

SimpleSAMLphp har har genererat följande metadata. För att sätta upp en betrodd federation kan du skicka metadata till de parter du har förtroende för.

Du kan hämta metadata i XML-format på dedicerad URL:

https://sso.vainfarm.com/saml2/idp/metadata.php

Metadata

I SAML 2.0 Metadata XML-format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sso.vainfarm.com/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.vainfarm.com/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.vainfarm.com/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>

I filformatet för simpleSAML, använd detta detta format om SimpleSAMLphp används i mottagende sida:

$metadata['https://sso.vainfarm.com/saml2/idp/metadata.php'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://sso.vainfarm.com/saml2/idp/metadata.php',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://sso.vainfarm.com/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://sso.vainfarm.com/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => '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',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
);

Certifikat

Hämta X509-certifikaten som PEM-kodade filer.

idp.crt

SES_GLOBAL_ID::
Warning: session_name(): Cannot change session name when headers already sent in /home/vainfarm/www/sso/lib/SimpleSAML/SessionHandlerPHP.php on line 107

Warning: session_set_cookie_params(): Cannot change session cookie parameters when headers already sent in /home/vainfarm/www/sso/lib/SimpleSAML/SessionHandlerPHP.php on line 119
getPreviousName::NULL getPreviousValue::array(2) { ["Name"]=> string(9) "PHPSESSID" ["Previous"]=> string(11) "No Previous" } NULL