Metadatos SP SAML 2.0
Aquí están los metadatos que SimpleSAMLphp ha generado. Puede enviar este documento de metadatos a sus socios de confianza para configurar una federación.
Puede obtener una URL con los metadatos xml:
https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/metadata.php/default-sp
Metadatos
En formato xml de metadatos SAML 2.0:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/metadata.php/default-sp"> <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>MIIDvTCCAqWgAwIBAgIUeLf9YFG0m8PyCcvyuMLrZCZ5Me4wDQYJKoZIhvcNAQELBQAwbjELMAkGA1UEBhMCTUsxEzARBgNVBAgMClNvbWUtU3RhdGUxDzANBgNVBAcMBlNrb3BqZTENMAsGA1UECgwEVUtJTTEqMCgGA1UEAwwhaXN0LXN0YWZmLmlkcC1wcm94eS5maW5raS51a2ltLm1rMB4XDTIxMDMwMzIwMTU1OFoXDTMxMDMwMTIwMTU1OFowbjELMAkGA1UEBhMCTUsxEzARBgNVBAgMClNvbWUtU3RhdGUxDzANBgNVBAcMBlNrb3BqZTENMAsGA1UECgwEVUtJTTEqMCgGA1UEAwwhaXN0LXN0YWZmLmlkcC1wcm94eS5maW5raS51a2ltLm1rMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ep3e3WlQ9Tvzu7w4QZvnl6KeX+3UI/Mo5TheBvVe4GiazmpN9vMQosYyK8wB13ba6FHz+DihUcrdjhTDJZKZ0i+0GtBLQ2/h8sPxiW2aUlaPhsuv5eDi+ElUlafPPTezVBxjQJ9iGXs+9mctUjL8gO25G1+6Cd4SD9INJrFzv2IlOZaFAve6/F2ERkWXvm1cgDTBRcpjnKKs7/7d0nn7hjOJoHcRDnubvv2JO+YGPPYMzssocJ6Fgr9ij1sXHnfzFMhDRLmlmY4KULQQ1yK/uwvsQiOfAHABftycDqMMTgPMILW5T/1JfeKgd5a7xawan2KlhpljLQkxOTLczZb0wIDAQABo1MwUTAdBgNVHQ4EFgQUN2R0/dP5euVbzTNEwSwxaSXkfRMwHwYDVR0jBBgwFoAUN2R0/dP5euVbzTNEwSwxaSXkfRMwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEApv+ji0qn79cXeAvTAJYTkqHHEV7YdLcPgvMknX82NScE1OGadI2cVLdsHvkR7Rn+e6hxImhiZ3eo/LxUAZuzfOpVSo2pcAKqaNH3fAH9cWukFSokbw2xKByEnQdZlEJ1QlfnrbXLvfLi7E+5Z0RoNw2lzWM1NZnh6kxaGv2YiTaMa+udWLqmkPsUF5DMwR6XBxBQz+LojJrz4KvpzRZZsGcuYnO9gDnrBRdYORHPv3Nwvey4OVk/0Q5DIko+a1WSqvLN3HhUCn23aIhsETvGShf7Mnvtubyu4AMSRHyebkauO1Vk6fh4gou3JgwTIpGi/NSXHUoEfDYTuNWUuBGElw==</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>MIIDvTCCAqWgAwIBAgIUeLf9YFG0m8PyCcvyuMLrZCZ5Me4wDQYJKoZIhvcNAQELBQAwbjELMAkGA1UEBhMCTUsxEzARBgNVBAgMClNvbWUtU3RhdGUxDzANBgNVBAcMBlNrb3BqZTENMAsGA1UECgwEVUtJTTEqMCgGA1UEAwwhaXN0LXN0YWZmLmlkcC1wcm94eS5maW5raS51a2ltLm1rMB4XDTIxMDMwMzIwMTU1OFoXDTMxMDMwMTIwMTU1OFowbjELMAkGA1UEBhMCTUsxEzARBgNVBAgMClNvbWUtU3RhdGUxDzANBgNVBAcMBlNrb3BqZTENMAsGA1UECgwEVUtJTTEqMCgGA1UEAwwhaXN0LXN0YWZmLmlkcC1wcm94eS5maW5raS51a2ltLm1rMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ep3e3WlQ9Tvzu7w4QZvnl6KeX+3UI/Mo5TheBvVe4GiazmpN9vMQosYyK8wB13ba6FHz+DihUcrdjhTDJZKZ0i+0GtBLQ2/h8sPxiW2aUlaPhsuv5eDi+ElUlafPPTezVBxjQJ9iGXs+9mctUjL8gO25G1+6Cd4SD9INJrFzv2IlOZaFAve6/F2ERkWXvm1cgDTBRcpjnKKs7/7d0nn7hjOJoHcRDnubvv2JO+YGPPYMzssocJ6Fgr9ij1sXHnfzFMhDRLmlmY4KULQQ1yK/uwvsQiOfAHABftycDqMMTgPMILW5T/1JfeKgd5a7xawan2KlhpljLQkxOTLczZb0wIDAQABo1MwUTAdBgNVHQ4EFgQUN2R0/dP5euVbzTNEwSwxaSXkfRMwHwYDVR0jBBgwFoAUN2R0/dP5euVbzTNEwSwxaSXkfRMwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEApv+ji0qn79cXeAvTAJYTkqHHEV7YdLcPgvMknX82NScE1OGadI2cVLdsHvkR7Rn+e6hxImhiZ3eo/LxUAZuzfOpVSo2pcAKqaNH3fAH9cWukFSokbw2xKByEnQdZlEJ1QlfnrbXLvfLi7E+5Z0RoNw2lzWM1NZnh6kxaGv2YiTaMa+udWLqmkPsUF5DMwR6XBxBQz+LojJrz4KvpzRZZsGcuYnO9gDnrBRdYORHPv3Nwvey4OVk/0Q5DIko+a1WSqvLN3HhUCn23aIhsETvGShf7Mnvtubyu4AMSRHyebkauO1Vk6fh4gou3JgwTIpGi/NSXHUoEfDYTuNWUuBGElw==</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml2-logout.php/default-sp"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml2-acs.php/default-sp" index="0"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml1-acs.php/default-sp" index="1"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml2-acs.php/default-sp" index="2"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml1-acs.php/default-sp/artifact" index="3"/> </md:SPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>FINKI</md:GivenName> <md:SurName>FCC</md:SurName> <md:EmailAddress>fcc@finki.ukim.mk</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
En un fichero de formato SimpleSAMLphp - utilice esta opción si está usando una entidad SimpleSAMLphp en el otro extremo:
$metadata['https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/metadata.php/default-sp'] = array ( 'SingleLogoutService' => array ( 0 => array ( 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml2-logout.php/default-sp', ), ), 'AssertionConsumerService' => array ( 0 => array ( 'index' => 0, 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST', 'Location' => 'https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml2-acs.php/default-sp', ), 1 => array ( 'index' => 1, 'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post', 'Location' => 'https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml1-acs.php/default-sp', ), 2 => array ( 'index' => 2, 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact', 'Location' => 'https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml2-acs.php/default-sp', ), 3 => array ( 'index' => 3, 'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01', 'Location' => 'https://ist-staff.idp-proxy.finki.ukim.mk/module.php/saml/sp/saml1-acs.php/default-sp/artifact', ), ), 'contacts' => array ( 0 => array ( 'emailAddress' => 'fcc@finki.ukim.mk', 'contactType' => 'technical', 'givenName' => 'FINKI', 'surName' => 'FCC', ), ), 'certData' => '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', );