Metadados SAML 2.0 IdP

De seguida pode encontrar os metadados gerados pelo simpleSAMLphp. Pode enviar este documento de metadados aos seus parceiros para configurar uma federação.

Pode obter os metadados em XML num URL dedicado:

Metadados

Metadados no formato XML SAML 2.0

<?xml version="1.0"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.acs.si/idp/20090116">
  <IDPSSODescriptor xmlns:ds="http://www.w3.org/2000/09/xmldsig#" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.acs.si/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.acs.si/simplesaml/saml2/idp/SSOService.php"/>
  </IDPSSODescriptor>
  <ContactPerson contactType="technical">
    <GivenName>Klemen</GivenName>
    <SurName>Zajec</SurName>
    <EmailAddress>klemen@acs.si</EmailAddress>
  </ContactPerson>
</EntityDescriptor>

Metadados no formato ficheiro de configuração do simpleSAMLphp. Use esta alternativa se usar uma entidade simpleSAMLphp no outro extremo:

'https://idp.acs.si/idp/20090116' => array (
  'SingleSignOnService' => 'https://idp.acs.si/simplesaml/saml2/idp/SSOService.php',
  'SingleLogoutService' => 'https://idp.acs.si/simplesaml/saml2/idp/SingleLogoutService.php',
  'certFingerprint' => '7dfc994fa95f25fd90642602c3ce86023921ccd6',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
),